Confidential AI Agents on TEE Models in Intel TDX
Nine vertical agents for teams that cannot paste client files, patient records, MNPI or pre-filing tax positions into ChatGPT, including the Sovereign Legal AI agent for European law firms, forked from Anthropic's Claude for Legal playbooks.
Every prompt and every uploaded document is parsed by our servers and passed to a TEE model (Intel TDX); never used for training. French controller.
Why confidential agents exist
Regulated work does not stop because ChatGPT is convenient. Lawyers still draft contracts under attorney-client privilege. CFOs still build forecasts on material non-public information. Hospitals still process protected health information under HIPAA and the GDPR Article 9 special-category rules. Tax teams still build transfer pricing files that are statutory-privileged under §6713. For every one of these workloads, the moment data leaves your perimeter and lands inside a third-party model the legal posture changes, usually for the worse.
Intel TDX (Trust Domain Extensions) runs the model inside a hardware enclave with CPU-level memory encryption: the host operating system of the GPU machine sees ciphertext, not your prompt. On the way there, our servers parse each prompt and upload in clear and relay it over TLS; nothing is used for training. GET /v1/attestation returns the Intel TDX quote and the NVIDIA GPU evidence of the instances serving the model, on a nonce you choose, so your compliance team can check that the model runs inside a TDX domain, not on a soft-isolated VM with the same marketing copy. It covers the serving instances, not that a given response came from them.
VOLTAGE EI, a French company, is the controller, and the customer database sits in Frankfurt. The compute itself runs on capacity operated by our listed sub-processors in the US, under Standard Contractual Clauses, protected by Intel TDX rather than by location, and that transfer is documented for your Data Protection Impact Assessment. Every agent below runs on the same architecture: the only thing that differs is the system prompt, the document schema, the regulatory framework it cites and the buyer it was designed for.
None of these agents replace a partner, a CPA, a clinician or a CISO. They replace the analyst hours that come before partner sign-off. They are framed and priced accordingly, $20/month for personal use, $349/month for small teams, $1,199/month for departments, custom for enterprise rollouts with SSO/SAML, signed DPA, dedicated TDX capacity and fine-tuning on your playbook.
Intel TDX with CPU-encrypted memory. GPU attached inside the trust domain for vision workloads (GPU CC mode off on the agent tier). Attestation of the serving instances on request (GET /v1/attestation), not per response.
French company (VOLTAGE EI), customer database in Frankfurt. Compute runs at listed sub-processors in the US, under Standard Contractual Clauses. Signed Processor DPA available online (GDPR Article 28).
Zero training on customer data. Static model weights. Even Enterprise fine-tuning runs inside a confidential VM with private tenant weights.
The 9 agents
Each agent has its own system prompt, regulatory framework, document schema and output structure. Click into any one to see capabilities, workflow, example outputs, pricing and FAQ.
Contract Analyst
Checklist-based first-pass contract review in minutes. Reduces third-party exposure; whether privilege holds is your call.
Learn moreFinancial Analyst
Board-ready financial analysis with the receipts, without sending MNPI to OpenAI, Anthropic or Google.
Learn moreCompliance Officer
Multi-framework gap analysis (GDPR, SOX, HIPAA, SOC 2, DORA, AI Act) without leaking your security posture.
Learn moreMedical Records Analyst
Chart review and coding checks on an open-weight model in an Intel TDX enclave. BAA not offered yet.
Learn moreDue Diligence Analyst
CIM, QoE, financial model and management presentation review without sending MNPI to OpenAI, Anthropic or Google.
Learn moreCybersecurity Analyst
Triage CVEs, reconstruct incidents and map findings to MITRE ATT&CK, without sending your security posture to a third-party model.
Learn moreHR & Workplace Analyst
Pay equity, performance, investigations and layoff planning, without exposing employee data to a third-party model.
Learn moreTax & Transfer Pricing Analyst
First-pass tax and transfer pricing analysis on an open-weight model in an Intel TDX enclave. Nothing goes to OpenAI, Anthropic or Google.
Learn moreSovereign Legal AI
Anthropic open-sourced 12 plugins. We forked them, adapted them to EU law, and run them on an open-weight model inside an Intel TDX trust domain.
Learn moreHow to choose
Pick the agent closest to the regulatory framework that already governs your work. The Contract Analyst is the right starting point for any team where documents are protected by professional secrecy. The Financial Analyst is built for MNPI workflows. The Compliance Officer covers multi-framework gap analysis. The Medical Records Analyst is the HIPAA / GDPR Art. 9 path. Due Diligence is the M&A path. Cybersecurity is the SOC and CVE triage path. HR covers pay equity, RIF planning and investigations. Tax covers transfer pricing, Pillar Two and provision review. Teams that need an agent we have not built can deploy any CrewAI, LangChain or OpenClaw agent on the same confidential infrastructure via API. Developers whose own coding agent needs a confidential GPU can start with the agent quickstart.
50 messages a month, no card
The Free plan gives you 50 messages a month on the General Assistant chat (a TEE model from our catalog), 1 seat, no card required. Upgrade to a tier when you want the vertical agents on your own documents.