Prices, live from the machines.Per second. No commitment.
Confidential VM · Intel TDX · attestation by you
You generate the proofs, not us
A full Intel TDX virtual machine with root over SSH. /dev/tdx_guest is yours: you write your own report_data and read back a signed quote. On the single-GPU H200, H100 and RTX PRO 6000 Blackwell VMs, and per GPU on the 8x H100 node, the GPU adds its own NVIDIA-verified attestation, bound to a nonce you choose.
Two ways to run confidential AI: a Confidential VM or the confidential inference API. Every figure on this page is read from the provider inventory a few minutes ago, and on a VM the unused part of the first hour comes back to your balance when you release.
One hour charged upfront, then per second; the unused part is refunded on Release. No persistent volume on this tier: the disk is destroyed with the machine, copy your results off before you release. See the two proofs, measured.
Azure's confidential GPU size, NCC40ads H100 v5, lists at $8.90/h (AMD SEV-SNP, Vantage catalog, 12 September 2026); Azure lists no confidential H200.
Confidential AI Inference · OpenAI-compatible
14 models served inside Intel TDX
Change the base URL to api.voltagegpu.com/v1 and keep your OpenAI SDK. Billed per million tokens, no minimum.
Standard GPUs · no enclave
The lowest price, for data that is not sensitive
Dedicated bare metal · no enclave
A whole 8x H100 SXM machine, nothing shared
One tenant per machine: eight H100 SXM GPUs on a full NVLink mesh, 192 vCPU, root over SSH, no hypervisor. Not confidential: no enclave and no attestation. Plain Ubuntu 24.04; one command installs the NVIDIA driver and Fabric Manager.
Billed per second from your prepaid balance. These offers have no enclave: for data you cannot expose, use a Confidential VM. Details, limits and the checks you can run
Sandboxes · no enclave
Small Ubuntu boxes that pause themselves
A small Ubuntu VM with SSH for scripts, agents and tests. It pauses on its own when idle and costs a fraction of its price while paused. Not confidential: no enclave and no attestation.
Billed per second from your prepaid balance. These offers have no enclave: for data you cannot expose, use a Confidential VM. How sandboxes work
All plans include
Frequently Asked Questions
Start building with confidential AI
$3.80 welcome credit with your first top-up of $10 or more. Per-second billing, no subscription.