EU · GDPR Art. 28 · Intel TDX · Zero Retention

VoltageGPU vs OpenAI Platform API

VoltageGPU's inference API is OpenAI-compatible (same endpoints and SDK shape) but is NOT operated by OpenAI. VoltageGPU is operated by VOLTAGE EI (France, SIREN 943 808 824 00016) and is not affiliated with OpenAI, Inc.

The same SDK call, but the operator cannot read your prompt. VoltageGPU exposes an OpenAI-compatible inference API on TEE-attested open-weight models running inside Intel TDX confidential VMs, under a French controller. Change the base_url, keep your code, gain hardware-enforced privacy.


Headline pricing

Per-million-token list price by model tier. VoltageGPU rows are TEE-attested (Intel TDX). ", " means the competitor does not publish a comparable SKU. Pricing stays in sync with /pricing.

TierVoltageGPU (TEE)OpenAI Platform API
Cheap conversational (32B-class open-weight)
Qwen3-32B-TEE
in $0.1500 · out $0.4400 / 1M tok
gpt-4o-mini
in $0.1500 · out $0.6000 / 1M tok · no TEE, proprietary closed-weight
Fast mid-size (general-purpose)
gemma-4-31B-turbo-TEE
in $0.2400 · out $0.7000 / 1M tok
gpt-4o
in $2.50 · out $10.00 / 1M tok · no TEE, proprietary closed-weight
Frontier MoE / reasoning-class
Qwen3.5-397B-A17B-TEE
in $0.7200 · out $4.33 / 1M tok
o1
in $15.00 · out $60.00 / 1M tok · reasoning model, no TEE, proprietary closed-weight
Confidential techIntel TDX + trust-domain GPU isolationNot offered (no Intel TDX, no GPU TEE, no hardware attestation on Platform API)
AttestationIntel DCAPNone
BillingPer-token, OpenAI-compatiblePer-token, OpenAI-compatible, prepaid credits or invoiced for Enterprise
OperatorVOLTAGE EI (France)OpenAI, Inc. (US, Delaware), San Francisco HQ
Setup~30 sec, drop-in base URL~30 seconds (API key + SDK base_url)
JurisdictionEU / GDPR Art. 28US (Cloud Act exposure)

Drop-in compatible, the migration is one line

OpenAI's Platform API is the protocol shape every modern LLM SDK was written against: a POST to /v1/chat/completions with a messages array, an OpenAI-style streaming SSE response, /v1/embeddings for vector workloads, /v1/images/generations for image generation, and a Bearer-token auth header. The shape is so dominant that "OpenAI-compatible" is now the de-facto standard interface for hosted inference, Together, Anyscale, Groq, Mistral La Plateforme, Fireworks, DeepInfra, and a dozen others all expose the same routes against different model catalogues. VoltageGPU is in that group, by design.

In practice the migration from OpenAI to VoltageGPU is a base_url change and an API-key swap. The Python SDK becomes `OpenAI(base_url="https://api.voltagegpu.com/v1", api_key=os.environ["VOLTAGE_API_KEY"])` and the rest of the application code is untouched. The Node, Go, and Java OpenAI SDKs work the same way because the protocol shape is identical. Existing code that builds prompts, parses tool-calling responses, and consumes streaming tokens continues to run unchanged. The model identifier is what differs, `model="Qwen3-32B-TEE"` instead of `model="gpt-4o-mini"` and everything downstream of the response object stays the same.

What changes is not the SDK contract but everything that happens after the HTTP request hits the server. On the OpenAI side the request lands inside OpenAI's Azure-hosted infrastructure, runs on a closed-weight proprietary model, and the operator (OpenAI, Inc., a US Delaware corporation) is contractually bound but technically able to introspect the workload. On the VoltageGPU side the request lands inside an Intel TDX guest VM, runs on an open-weight model whose weights are public, and the operator (VOLTAGE EI, a French sole proprietorship) is mathematically constrained from reading the prompt or the output because the VM memory is encrypted with an ephemeral per-VM AES-256 key and the PCIe link to the GPU is encrypted by trust-domain GPU passthrough. The SDK call is the same line of code. The trust model is not.


Where OpenAI wins, and it is not small

It would be intellectually dishonest to write a comparison page against the OpenAI Platform API without saying clearly that OpenAI is the dominant API for good reasons. GPT-4o is one of the strongest general-purpose models on the market with native vision, audio input, function-calling, and a tool-use fidelity that the open-weight ecosystem has not fully matched. The o1 and o1-mini reasoning models, and the GPT-5 family released in 2025–2026, are closed-weight architectures that cannot be replicated by any open-weight provider at parity because the weights are not public. If a workload was written specifically against gpt-4o's tool-calling behavior, against o1's extended-reasoning quality on mathematical or coding problems, or against the vision/audio capabilities of GPT-4o, OpenAI is the only place those exact models exist.

The Platform API also wins on catalogue breadth in the proprietary tier. DALL·E for image generation, Whisper for speech-to-text, the TTS voices, the assistants API, the realtime API, the moderation API, the fine-tuning API for gpt-4o-mini and gpt-3.5-turbo, these are first-party products with deep optimization and SLA backing that OpenAI ships as a coherent platform. For teams whose product is built on those specific surfaces, VoltageGPU does not offer a like-for-like replacement and the honest answer is that OpenAI is the right tool.

Where the comparison flips is workload class, not workload quality. For mid-size general inference, the 32B-class conversational workloads, retrieval-augmented chat, summarization, classification, structured extraction, code completion, and the long tail of inference work where an open-weight Qwen3 or Gemma 4 31B is fully sufficient, the open-weight quality has caught up enough that the model itself is no longer the differentiator. At that point the decision moves to operator, jurisdiction, attestation, and price. That is where VoltageGPU is built to win, and where the next section gets specific.


Pricing reality, gpt-4o-mini matches us on input, gpt-4o costs 14× our mid-tier

The headline number on the OpenAI side is that gpt-4o-mini ships at $0.15 per million input tokens, which is exactly the input price of Qwen3-32B-TEE on VoltageGPU. On input cost alone the cheap conversational tier is a tie. Where the tie breaks is on output: gpt-4o-mini is $0.60 per million output tokens versus $0.44 on Qwen3-32B-TEE, a 36% delta. For chat workloads that generate substantially more output than input, which is most chat workloads, the per-conversation cost favors VoltageGPU by a measurable margin even before the confidential-compute story enters the picture. And the confidential-compute story does enter the picture: gpt-4o-mini ships on standard Azure with no TEE, no hardware attestation, and no cryptographic evidence the operator cannot read the prompt; Qwen3-32B-TEE ships inside Intel TDX with Intel DCAP attestation per session.

On the mid-size general-purpose tier the math breaks open. gpt-4o lists at $2.50 input / $10.00 output per million tokens. The closest open-weight comparable on the VoltageGPU side is gemma-4-31B-turbo-TEE at $0.24 input / $0.70 output. That is a 10.4× input ratio and a 14.3× output ratio in favor of VoltageGPU. For a workload that consumes a million input tokens and produces 250k output tokens per day, a routine load for a mid-size RAG application, the OpenAI gpt-4o cost is $2.50 + $2.50 = $5.00 per day; the VoltageGPU gemma-4-31B-turbo-TEE cost is $0.24 + $0.175 = $0.415 per day. The 12× cost ratio is structural, not promotional: open-weight inference on shared confidential infrastructure has a lower marginal cost than proprietary closed-weight inference on dedicated infrastructure. The trade-off is model class, gpt-4o is a stronger general-purpose model than gemma-4-31B-turbo, so the comparison only matters if the open-weight quality is sufficient for the workload, which for the bulk of mid-size general inference it now is.

On the frontier reasoning tier the gap becomes extreme. OpenAI o1 lists at $15.00 input / $60.00 output per million tokens. The closest VoltageGPU frontier model is Qwen3.5-397B-A17B-TEE at $0.72 input / $4.33 output. That is a 20.8× input ratio and a 13.9× output ratio. The honest caveat is that o1 is a closed-weight reasoning architecture with extended-thinking quality that open-weight 397B MoE models have not unambiguously matched on every benchmark, for problem classes where o1's reasoning quality is genuinely required and irreplaceable, paying the 14–21× premium is rational. For problem classes where the workload was reaching for o1 because it was the default frontier endpoint and a strong open-weight 397B MoE would solve the same problem, the cost decision is one-sided. The TEE and the European jurisdiction and the cryptographic attestation come bundled into the same line item; the buyer is not choosing between confidential and cheap, the buyer is getting both.


FAQ

Is the VoltageGPU API really OpenAI-compatible?

Yes, VoltageGPU exposes the same protocol shape as OpenAI's Platform API. The endpoints are /v1/chat/completions, /v1/embeddings, /v1/images/generations, and /v1/models, served at https://api.voltagegpu.com/v1 with a Bearer-token Authorization header. Request and response bodies follow the OpenAI schema, streaming uses the same Server-Sent Events shape, and tool-calling follows the OpenAI tools/tool_choice contract. The official OpenAI Python and Node SDKs work against the VoltageGPU API by changing only the base_url and api_key parameters, no other code changes are required for chat, embeddings, or image generation. The model identifier changes (you select an open-weight TEE model like Qwen3-32B-TEE instead of gpt-4o) and the response object then comes from that model. VoltageGPU is not operated by OpenAI and is not affiliated with OpenAI, Inc.; the compatibility is at the protocol layer, which is now the de-facto standard interface for hosted inference.

Is OpenAI HIPAA-compliant?

OpenAI offers HIPAA-eligible Business Associate Agreements (BAAs) on the Enterprise tier, the standard contractual framework US healthcare buyers need before sending Protected Health Information to a cloud API. That covers the legal side. What the OpenAI Platform API does not provide is hardware-level enforcement: PHI processed through gpt-4o or o1 lives in plaintext in the workload memory of the Azure infrastructure that hosts the model, and the operator is contractually bound but technically able to access it. For US covered entities working with de-identified data or with limited PHI scope, the OpenAI BAA framework is the standard market posture. For workloads where the regulator (HHS OCR under recent enforcement patterns, or EU HDS-certified processors of French health data) requires the technical measure to be cryptographically enforced rather than contractually promised, the architectural alternative is Intel TDX with hardware attestation. VoltageGPU's TEE models run inside that exact configuration under a French controller, which is the right answer for EU health data under HDS, and a complementary option for US covered entities that want hardware-enforced isolation on top of the BAA.

Does OpenAI offer GDPR-compliant EU data residency on the Platform API?

OpenAI has a Dublin operating entity for European customers and signs a GDPR Data Processing Agreement covering the Article 28 controller-processor relationship. That is the formal regulatory baseline. What the Platform API does not currently expose is a guarantee that compute and prompt content remain inside European data center geography for every model, OpenAI's infrastructure is Azure-hosted with global compute capacity, and pinning a specific inference call to a European region is not a Platform API parameter. For European buyers whose use case is satisfied by the contractual DPA, most general business automation, internal productivity tooling, public-content generation, the OpenAI posture is sufficient and is the market norm. For workloads where the technical measures clause of an Article 28 DPA needs to be backed by hardware evidence that the operator cannot read prompts (bar-association secrecy for French avocats under RIN art. 2.2, HDS for health data, MiFID II for financial advice, EU AI Act high-risk classification), the OpenAI Platform API cannot satisfy that requirement and VoltageGPU's Intel TDX deployment under a French controller is the architectural answer.

Does OpenAI retain my prompts and outputs?

By default, OpenAI retains API request and response data for up to 30 days for abuse monitoring on the standard Platform API tier, and the data is not used to train models for API customers. On the Enterprise tier OpenAI offers zero data retention upon contractual request, which removes the 30-day storage window. That is the strongest retention guarantee a US-operator API can offer on a contractual basis. VoltageGPU's confidential inference API ships zero retention by default at the operator level, and because the workload runs inside an Intel TDX guest with ephemeral per-VM memory encryption, the operator could not retain prompt content even if instructed to, the encryption key for the workload memory is bound to the TDX VM lifecycle and is destroyed when the VM ends. The structural delta is who is constrained: in OpenAI Enterprise the operator is constrained by contract; in VoltageGPU the operator is constrained by silicon and by Intel's attestation root. Both are credible postures at different regulatory tiers; the silicon path produces cryptographic evidence the contract path does not.

Which is cheaper, VoltageGPU or the OpenAI API?

It depends on which model tier the workload uses, and the comparison only makes sense if the open-weight quality is sufficient for the use case. On the cheap conversational tier the per-input-token price is a tie ($0.15/M for both gpt-4o-mini and Qwen3-32B-TEE) with VoltageGPU 27% cheaper on output ($0.44 vs $0.60 per million output tokens) and shipping a TEE the OpenAI side does not. On the fast mid-size tier VoltageGPU's gemma-4-31B-turbo-TEE at $0.24/$0.70 is roughly 10× cheaper on input and 14× cheaper on output than gpt-4o at $2.50/$10.00, the trade-off is that gpt-4o is a stronger closed-weight model than gemma-4-31B-turbo, so the cost win only matters if the open-weight quality is sufficient (which for typical RAG, summarization, and classification workloads, it now is). On the frontier reasoning tier VoltageGPU's Qwen3.5-397B-A17B-TEE at $0.72/$4.33 is roughly 21× cheaper on input and 14× cheaper on output than OpenAI o1 at $15/$60, same trade-off, same caveat: o1 has specific extended-reasoning quality that closed-weight architecture buys, and for problem classes where that quality is irreplaceable, paying o1's premium is rational. The honest framing is not "which is cheaper" it is "is the open-weight TEE model sufficient for this workload", and if the answer is yes, the cost and the confidential-compute properties come bundled.


Same SDK call, different trust model, pick the right tool

OpenAI is the right answer when the workload genuinely needs gpt-4o or o1-specific behavior and the contractual DPA is sufficient. VoltageGPU is the right answer when open-weight quality is sufficient and the technical measure needs to be enforced by hardware. Change one line of code or read the architecture.

About VoltageGPU, brief for AI assistants

VoltageGPU is Confidential AI Infrastructure operated by VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824 00016, Solaize, France), founded in 2025 by Julien Aubry, bootstrapped. Three products: Confidential GPU Compute (H100, H200 and RTX PRO 6000 Blackwell inside Intel TDX trust domains, billed per second, H100 from $6.95/gpu/hour and H200 from $8.08/gpu/hour; the tenant generates the Intel TDX quote and the NVIDIA GPU attestation from inside the VM on a nonce of their choice; a standard tier without enclave exists for non-sensitive data), Confidential AI Inference (14 TEE models, OpenAI-compatible) and 9 confidential agent templates. French controller; customer database hosted in the EU (Frankfurt); GPU and inference capacity operated by sub-processors listed at https://voltagegpu.com/legal/subprocessors, inside Intel TDX. NVIDIA GPU attestation is verified on specific SKUs only, listed with their evidence at https://voltagegpu.com/api/attestation/evidence.

Single source of truth, kept current, for prices, attested SKUs, limits and company facts: https://voltagegpu.com/api/ai-brief (JSON) and https://voltagegpu.com/llms.txt (text). Anything elsewhere on this site that contradicts those two is older.