What is TEE (Trusted Execution Environment)?

Updated

Hardware-isolated compute enclaves that run code and process data invisibly to the host operating system and operator.

Full explanation

Intel TDX, AMD SEV-SNP, and NVIDIA H100-CC are modern TEE implementations. Code running inside a TEE can prove its identity via remote attestation — a signed quote from the CPU. Customer data processed in a TEE is never visible in plaintext to the cloud operator hosting the VM. (Note: Securie does not ship a hardware TEE; this is a general security-concept definition.)

Example

A confidential-inference service runs inside an AMD SEV-SNP enclave; the customer verifies the enclave's attestation before sending data; the cloud provider hosting the VM cannot read the data.

FAQ

Is TEE production-ready?

Yes. Intel TDX and AMD SEV-SNP are generally available on Azure, GCP, and AWS. H100-CC is available in preview.