Skip to main content

The Unified API for Confidential AI

Pre-flight proof. Provable infrastructure over standard HTTPS. Reproducibly open source. Drop-in compatible. No lock-in.

Private beta in progress

Not a Black Box

Every request resolves to a distinct deployment from the routing table compiled into the measured binary. We cannot hide what served you even if we wanted to.

Usage-Based Top-Ups

Top up your balance at a flat 2% fee plus processing. Spend at direct retail costs with savings passed to you — no subscriptions, no minimums.

One API, Every Model

Point any OpenAI-compatible client at a single endpoint — your code remains identical.

E2EE without the Theater

TLS terminates inside measured enclave memory — no heavy encryption machinery necessary.

Policy & Routing

Enforce provider fallbacks, model allowlists, and custom routing rules dynamically per request.

Fault-Aware Billing

If a provider errors out or a stream drops, you don't pay for it.

The open-source backend to your open-source stack.

You trust your client. What about the backend?

Open-source clients and harnesses are treated as the AI industry's trust wedge, yet the black-box nature of the infrastructure your most sensitive information touches is conveniently swept under the rug.

Confidential compute — actually verified.

Most confidential compute is a theater of unproven sources and proprietary code existing merely to exist. We took no shortcuts, dual-attesting a 100% open-source gateway reproducibly compiled from a fully bootstrapped, verified toolchain.

You choose who to trust.

We provide the cryptographic trust required to handle your data while the provider receives only what is necessary and nothing more.

L4 Ingress Load Balancing
Stateless Fleet Mechanics
Zero-Downtime Repro Patching
GitHub Cryptographic CI/CD
Guix Reproducible Builds
Sigstore SLSA Provenance
Fulcio Ephemeral Certificates
Rekor Transparency Ledger
AMD & Intel Collateral Maintenance
Decoupled Attestation Authority
drand Freshness Beacons
HIGH AVAILABILITY, MINUS THE COMPLEXITY

Pick Your Verification Protocol

Start with the default; reach for others when your environment requires it.

Swipe

Verified HTTPS

Attestation-backed trust over standard HTTPS.

  • RA-TLS guarantees without the handshake overhead.
  • Standard HTTPS: no custom certificates, ALPN, or client transport.
Provisioning key
  • jordan@acme
    Member · read-only
  • taylor@acme
    Admin · read-write

Key Rotation Without Coordination

Decouple keys from their secrets and assignments. When one secret looks compromised, rotate or revoke only that key instead of disrupting the whole org.

Real-time Performance

Requests Today
1,248,932

Median latency

164 ms

Error rate

0.17%

Uptime

99.991%