What is TEE (Trusted Execution Environment)?

Hardware-isolated compute enclaves that run code and process data invisibly to the host operating system and operator.

Full explanation

Intel TDX, AMD SEV-SNP, and NVIDIA H100-CC are modern TEE implementations. Code running inside a TEE can prove its identity via remote attestation — a signed quote from the CPU. Customer data processed in a TEE is never visible in plaintext to the cloud operator or to Securie operators. This is the architecture that makes 'operator-zero-knowledge' possible.

Example

A Securie inference service runs inside an AMD SEV-SNP enclave. The customer verifies the enclave's attestation before sending data; the cloud provider hosting the VM cannot read the data.

FAQ

Is TEE production-ready?

Yes. Intel TDX and AMD SEV-SNP are generally available on Azure, GCP, and AWS. H100-CC is available in preview.