Contract and audits vs attested enclave

VoltageGPU vs RunPod

RunPod (written Runpod since June 2025) is a US company that rents NVIDIA GPUs as Pods, Serverless endpoints and Clusters, on Secure Cloud and Community Cloud, across 31 regions. Its documentation, read in full on 7 November 2026, does not mention confidential computing or hardware attestation for tenants.

Short answer: yes, RunPod offers a GDPR Article 28 Data Processing Agreement, and its enterprise page says HIPAA Business Associate Agreements are available (sources checked 7 November 2026). A DPA makes the promise binding; it does not change what the host can technically see. Same GPU, different trust model: RunPod rents GPUs backed by a contract and audit reports; VoltageGPU runs GPUs inside Intel TDX trust domains, with an attestation you generate yourself, from a French company acting as your processor under a DPA (GDPR Art. 28).

Short answers about RunPod

Does RunPod offer a DPA?

Yes. RunPod publishes a Data Processing Agreement that forms part of its Master Services Agreement, names RunPod as processor and the customer as controller, and incorporates the EU Standard Contractual Clauses (Module Two, governed by Irish law) and the UK Addendum. It becomes binding only once you complete its signature block and submit it through RunPod's Trust Center (trust.runpod.io). It lists its sub-processors and says RunPod may keep some of them confidential, named only under an NDA.

Sources: Runpod Data Processing Agreement (read 7 November 2026); Runpod Trust Center (read 7 November 2026)

Is RunPod GDPR compliant?

RunPod says so. Its documentation states that RunPod "is fully compliant with the General Data Protection Regulation (GDPR) for data processed in European data center regions", and its trust center lists GDPR among its programs. Its privacy policy names Prighter as its GDPR representative in the EU and the UK and says RunPod has appointed a Data Protection Officer. Whether your own processing complies stays your assessment as controller.

Sources: Runpod docs: data security and legal compliance (read 7 November 2026); Runpod Trust Center (read 7 November 2026); Runpod privacy policy (read 7 November 2026)

Does RunPod support HIPAA workloads?

RunPod says it does. Its enterprise page says RunPod "supports HIPAA and GDPR requirements, with BAAs and DPAs available" and that enterprise workloads run in Secure Cloud; its documentation lets Secure Cloud Pods be restricted to data centers that hold a given compliance status, HIPAA included. Its press release of 6 February 2026 announced an independent HIPAA audit and adds that data center compliance may vary. We found no public BAA text listing the services it covers, and the pages we read do not state the conditions for signing one: ask RunPod before you send protected health information.

Sources: Runpod enterprise page (read 7 November 2026); Runpod docs: runpodctl pod (read 7 November 2026); Runpod press release on HIPAA and GDPR (read 7 November 2026)

How does RunPod handle data privacy?

Two documents share the job. Its privacy policy (last updated 7 August 2025) covers what RunPod collects as controller, such as account, billing and website data, and says it does not apply to data RunPod processes on behalf of business customers, which its agreements with them govern (the DPA is one). For workloads, its documentation describes Pods as containers in a multi-tenant environment and says its terms of service prohibit hosts from inspecting Pod data, with removal from the platform for a violation. Its documentation does not mention confidential computing, a TEE or attestation reports for tenants.

Sources: Runpod privacy policy (read 7 November 2026); Runpod docs: data security and legal compliance (read 7 November 2026); Runpod documentation, full text (read 7 November 2026)

Side by side, as of 7 November 2026

RunPod column: what its own pages say, each linked with the day we read it. VoltageGPU column: what we offer today, with the page where you can check it.

Question	RunPod	VoltageGPU
DPA available	Yes. Published, part of its Master Services Agreement; binding once signed and submitted through its trust center; Standard Contractual Clauses (Module Two) and UK Addendum. Source: Runpod Data Processing Agreement (read 7 November 2026)	Yes. Published in full, part of our Terms of Service: VOLTAGE EI is the processor, you are the controller; Standard Contractual Clauses for transfers outside the EEA. Countersigned copy on request. Our DPA
HIPAA BAA	Available, per its enterprise page. HIPAA data-center filter on Secure Cloud only; no public BAA text found. Sources: Runpod enterprise page (read 7 November 2026); Runpod docs: runpodctl pod (read 7 November 2026)	No. We do not sign Business Associate Agreements today. Our trust page
SOC 2	SOC 2 Type II and SOC 3 examinations completed; report on request through its trust center, under NDA. Also ISO/IEC 27001:2022 certified (certificate valid until 26 August 2029). Sources: Runpod compliance page (read 7 November 2026); Runpod Trust Center (read 7 November 2026); Runpod blog post on SOC 2 Type II (read 7 November 2026)	None held. SOC 2 Type I is a target for Q4 2026, not held. Our compliance roadmap
Encryption at rest	Opt-in for the Pod volume disk ("Encrypt volume"); its docs say container disks and network volumes cannot be encrypted that way. Its DPA says encryption at rest is provided by AWS and its Secure Cloud data centers. Sources: Runpod docs: storage options (read 7 November 2026); Runpod Data Processing Agreement (read 7 November 2026)	Not claimed for VM disks. Intel TDX encrypts the VM's memory, not what the VM writes to disk: encrypt volumes inside the VM yourself (for example dm-crypt). Confidential Compute
Attestation you generate yourself	Not stated on its public pages as of 7 November 2026: the full text of its documentation does not mention confidential computing, a TEE or enclaves, and uses "attestation" only about its SOC 2 audit. Sources: Runpod documentation, full text (read 7 November 2026); Runpod docs: data security and legal compliance (read 7 November 2026)	Yes, on Confidential VMs: an Intel TDX quote over 64 bytes you choose, verified against Intel's root; NVIDIA GPU attestation verified from inside the VM on single-GPU H200, single-GPU RTX PRO 6000 Blackwell, single-GPU H100, 8x H200 and 8x H100 (the eight GPUs of each 8-GPU node, not the NVLink fabric between them); never tested on B200 or B300. The inference API returns no attestation per request. Requests pass through our relay, which sees them in clear (TLS ends at our host). Published proofs
EU regions	Yes. 31 regions, chosen per workload; its docs mention European data center regions and let Secure Cloud GPU Pods be pinned to a country. Sources: Runpod enterprise page (read 7 November 2026); Runpod docs: data security and legal compliance (read 7 November 2026); Runpod docs: runpodctl pod (read 7 November 2026)	No region to choose. Our confidential GPUs are run by a US sub-processor whose data-centre locations vary with capacity and are not limited to the EU. EU-only placement must be requested in writing, and we confirm what can be guaranteed. The account database is in Frankfurt. Our sub-processors
Per-second billing	Yes. Pods are billed by the second for compute and storage; one hour of credit is required to deploy. Source: Runpod docs: Pod pricing (read 7 November 2026)	Yes. One hour is charged when the VM is created, then billing runs per second; the unused part of that hour is refunded when you stop the VM. Pricing

Question

RunPod

VoltageGPU

DPA available

Yes. Published, part of its Master Services Agreement; binding once signed and submitted through its trust center; Standard Contractual Clauses (Module Two) and UK Addendum.

Source: Runpod Data Processing Agreement (read 7 November 2026)

Yes. Published in full, part of our Terms of Service: VOLTAGE EI is the processor, you are the controller; Standard Contractual Clauses for transfers outside the EEA. Countersigned copy on request.

Our DPA

HIPAA BAA

Available, per its enterprise page. HIPAA data-center filter on Secure Cloud only; no public BAA text found.

Sources: Runpod enterprise page (read 7 November 2026); Runpod docs: runpodctl pod (read 7 November 2026)

No. We do not sign Business Associate Agreements today.

Our trust page

SOC 2

SOC 2 Type II and SOC 3 examinations completed; report on request through its trust center, under NDA. Also ISO/IEC 27001:2022 certified (certificate valid until 26 August 2029).

Sources: Runpod compliance page (read 7 November 2026); Runpod Trust Center (read 7 November 2026); Runpod blog post on SOC 2 Type II (read 7 November 2026)

None held. SOC 2 Type I is a target for Q4 2026, not held.

Our compliance roadmap

Encryption at rest

Opt-in for the Pod volume disk ("Encrypt volume"); its docs say container disks and network volumes cannot be encrypted that way. Its DPA says encryption at rest is provided by AWS and its Secure Cloud data centers.

Sources: Runpod docs: storage options (read 7 November 2026); Runpod Data Processing Agreement (read 7 November 2026)

Not claimed for VM disks. Intel TDX encrypts the VM's memory, not what the VM writes to disk: encrypt volumes inside the VM yourself (for example dm-crypt).

Confidential Compute

Attestation you generate yourself

Not stated on its public pages as of 7 November 2026: the full text of its documentation does not mention confidential computing, a TEE or enclaves, and uses "attestation" only about its SOC 2 audit.

Sources: Runpod documentation, full text (read 7 November 2026); Runpod docs: data security and legal compliance (read 7 November 2026)

Yes, on Confidential VMs: an Intel TDX quote over 64 bytes you choose, verified against Intel's root; NVIDIA GPU attestation verified from inside the VM on single-GPU H200, single-GPU RTX PRO 6000 Blackwell, single-GPU H100, 8x H200 and 8x H100 (the eight GPUs of each 8-GPU node, not the NVLink fabric between them); never tested on B200 or B300. The inference API returns no attestation per request. Requests pass through our relay, which sees them in clear (TLS ends at our host).

Published proofs

EU regions

Yes. 31 regions, chosen per workload; its docs mention European data center regions and let Secure Cloud GPU Pods be pinned to a country.

Sources: Runpod enterprise page (read 7 November 2026); Runpod docs: data security and legal compliance (read 7 November 2026); Runpod docs: runpodctl pod (read 7 November 2026)

No region to choose. Our confidential GPUs are run by a US sub-processor whose data-centre locations vary with capacity and are not limited to the EU. EU-only placement must be requested in writing, and we confirm what can be guaranteed. The account database is in Frankfurt.

Our sub-processors

Per-second billing

Yes. Pods are billed by the second for compute and storage; one hour of credit is required to deploy.

Source: Runpod docs: Pod pricing (read 7 November 2026)

Yes. One hour is charged when the VM is created, then billing runs per second; the unused part of that hour is refunded when you stop the VM.

Pricing

Pick RunPod if

Your reviewer wants a SOC 2 Type II report, an ISO 27001 certificate or a signed BAA
Public-model fine-tuning, evaluation runs, research on non-sensitive data
A lower hourly price than our confidential VMs on H100 and H200, for a workload that needs no TEE
Serverless endpoints, Clusters, a much larger GPU catalogue, 31 regions

Pick VoltageGPU if

Client files, health data, or GDPR Article 9 categories in GPU memory
Your auditor wants the technical measure enforced by hardware, not promised
A French company on the contract, as processor under a DPA (GDPR Art. 28)
An Intel TDX attestation quote you generate and verify yourself

Headline pricing

Hourly list price per GPU SKU. A dash means the SKU is not publicly available from that provider. VoltageGPU prices are the canonical confidential-compute floor and stay in sync with /pricing. RunPod prices read on runpod.io/pricing on 7 November 2026.

GPU	VRAM	VoltageGPU	RunPod
NVIDIA H100	80 GB	$6.95/hr Intel TDX confidential	$3.99/hr H100 SXM, Secure Cloud, no TEE, read 7 Nov 2026
NVIDIA H200	141 GB	$9.00/hr Intel TDX confidential	$5.29/hr Secure Cloud, no TEE, read 7 Nov 2026

Confidential techIntel TDX trust domain, GPU passed throughNot mentioned in its documentation (no Intel TDX, no GPU TEE)

AttestationIntel DCAPNone listed

BillingPer-second, no commitPer second for compute and storage; one hour of credit needed to deploy

OperatorVOLTAGE EI (France)Runpod Inc., San Francisco, US

SetupUsually SSH-ready within 15 minOn-demand Pods; one hour of credit required to deploy

JurisdictionFrench company, GDPR Art. 28; compute at US sub-processors (SCCs)US company

RunPod DPA: what it covers, in plain terms

Short answer for the people who typed "runpod dpa": yes, RunPod offers a Data Processing Agreement, and says HIPAA Business Associate Agreements are available. The DPA forms part of RunPod's Master Services Agreement, names RunPod as processor and the customer as controller, lists the technical and organisational measures RunPod commits to, and incorporates the EU Standard Contractual Clauses (Module Two, governed by Irish law) and the UK Addendum for transfers to a US company. It becomes binding once you complete its signature block and submit it through RunPod's Trust Center. Its enterprise page says BAAs and DPAs are available and that enterprise workloads run in Secure Cloud. Sources, read 7 November 2026: runpod.io/legal/data-processing-agreement, runpod.io/enterprise and trust.runpod.io.

What a DPA does: it makes the promise legally binding and gives your DPO a document to file. What it cannot do: change what the host is technically able to see. RunPod's documentation describes Pods as containers in a multi-tenant environment and says its terms of service prohibit hosts from inspecting Pod data; the DPA adds contractual weight to that rule. That is fine for public-model fine-tuning, evaluation runs and pseudonymised pipelines. It stops being enough when a reviewer asks for the technical measure to be enforced by the hardware rather than promised, for example for client files under professional secrecy or GDPR Article 9 data. That boundary is the reason this page exists.

Secure Cloud, Community Cloud and a confidential VM

RunPod rents GPUs as Pods (containers), Serverless endpoints and Clusters, in two tiers. Secure Cloud runs in T3/T4 data centers and is the tier its enterprise page names for production and compliance-sensitive workloads. Community Cloud connects individual compute providers to users through what RunPod calls a vetted peer-to-peer system; RunPod no longer accepts new Community Cloud hosts. Its documentation describes neither tier as a trusted execution environment.

VoltageGPU is narrower. The contracting entity is VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824), acting as your processor under a data processing agreement (GDPR Art. 28). Each Confidential VM is an Intel TDX trust domain with NVIDIA GPUs passed through to it: the CPU encrypts the VM's memory with a key per trust domain, and NVIDIA's threat model places the host's software outside the boundary for the VM's private memory and the GPU's state. Inside the VM you generate an Intel TDX quote over 64 bytes you choose and verify it against Intel's root, and on the verified configurations a NVIDIA GPU attestation on your own nonce. What it leaves to you: availability, the encryption of disks and network traffic, and the physical attacks that Intel and NVIDIA place outside their threat models.

On price the honesty cuts the other way. A confidential H100 is $6.95/hr on VoltageGPU against $3.99/hr for an H100 SXM on RunPod Secure Cloud (no TEE, list price read 7 November 2026), and a confidential H200 is $9.00/hr against $5.29/hr. RunPod is cheaper per hour on both, and cheaper still on Community Cloud; the gap is the confidential stack. For a workload that does not need it, there is no reason to pay it.

RunPod GDPR and HIPAA compliance: on paper vs in silicon

On paper, RunPod's file is substantial. Its compliance page (updated 13 September 2026) and its trust center state an ISO/IEC 27001:2022 certificate (issued by Sensiba LLP, valid from 27 August 2026 to 26 August 2029, scoped to its information security management system), completed SOC 2 Type II and SOC 3 examinations, and HIPAA and GDPR programs. VoltageGPU holds none of these today. For most AI workloads, that file and a DPA are what a reviewer asks for, and RunPod is a correct choice.

What the file does not describe is the state of the machine while your data is in memory. RunPod's documentation describes containerized isolation between tenants and a terms-of-service rule against hosts inspecting Pod data; it does not mention confidential computing, a TEE or attestation reports for tenants. Some reviewers, for client files under professional secrecy or health data processed in the clear, ask for evidence that the host's software is kept out of the workload's memory by the hardware. That is what an Intel TDX trust domain with the GPU attached inside it is for, and what an attestation lets you check before you load the data.

So the answer is not "RunPod's DPA is weak". The contract route and the hardware route answer different questions. VOLTAGE EI signs a DPA as processor too; what it adds is an attestation you generate yourself inside the VM. Reasonable buyers can pick either side of that line; the page exists so the line is visible before the purchase.

Where RunPod wins, and it is not small

RunPod's catalogue is much larger than our handful of confidential VM configurations: its pricing page lists B300, B200, H200, H100 (PCIe, SXM and NVL), A100, RTX PRO 6000 and smaller cards, across 31 regions, plus Serverless endpoints, Clusters and OpenAI-compatible Public Endpoints. It holds certifications and audit reports we do not have, and it says BAAs are available; we do not sign them. If your procurement checklist starts with "attach your SOC 2 Type II" or "sign our BAA", RunPod is the one of the two that can answer it (ask it for its BAA conditions), and we cannot.

On raw price for non-confidential work RunPod wins outright: Secure Cloud H100 SXM at $3.99/hr and H200 at $5.29/hr, Community Cloud from $2.69/hr and $3.59/hr, and an A100 PCIe from $1.19/hr on Community Cloud (all read 7 November 2026), with no confidential A100 on our side. For research, public-model fine-tuning, or any workload whose data is not under a confidentiality obligation, that gap is the whole decision, and the buyer should choose RunPod. RunPod also sells inference (Serverless and Public Endpoints); its documentation does not describe a TEE for them.

The honest summary is product shape, not provider quality: RunPod is a broad GPU platform with a strong compliance file, and the right answer for workloads that a contract and an audit report cover. VoltageGPU is the right answer when the reviewer wants hardware evidence about the machine the data runs on. Buyers who use either as the wrong-shape tool will be unhappy with both.

FAQ

Is RunPod private? Can the host see my data?

RunPod's documentation describes Pods as containers in a multi-tenant environment, isolated from other users' containers, and says its terms of service prohibit hosts from inspecting Pod data, with removal from the platform for a violation. Secure Cloud runs in T3/T4 data centers; Community Cloud connects individual compute providers through what RunPod calls a vetted peer-to-peer system, and RunPod no longer accepts new Community Cloud hosts. Nothing in its documentation lets you check the host's access with hardware evidence: it does not mention confidential computing, a TEE or attestation reports. On a VoltageGPU Confidential VM, the host's software is outside the Intel TDX boundary for the VM's memory, and an attestation you generate yourself shows that the VM runs as a trust domain on genuine hardware.

Where is the RunPod trust center?

At trust.runpod.io. On 7 November 2026 it listed GDPR, HIPAA, ISO/IEC 27001:2022, SOC 2 Type 2 and SOC 3, a SOC 2 Bridge Letter 2026, a NIS2 Management Attestation Letter and the Data Processing Agreement, and said some documents require approved access. RunPod's blog says the SOC 2 report is shared after you sign an NDA. Our equivalent is the VoltageGPU trust page, which lists what we hold and what we do not.

Does RunPod have EU data centers?

Yes. RunPod says it operates 31 regions and lets you choose the regions your workloads run in; its documentation mentions European data center regions and lets Secure Cloud GPU Pods be pinned to a country. The current list of data centers is in its console and API; we did not copy it here. VoltageGPU offers no EU region by default: our confidential GPUs run at a US sub-processor whose data-centre locations are not limited to the EU, and EU-only placement has to be requested in writing.

Does RunPod offer confidential computing or GPU attestation?

Not in its documentation. The full text (docs.runpod.io/llms-full.txt, read 7 November 2026) contains no mention of confidential computing, a trusted execution environment, Intel TDX, AMD SEV or enclaves, and uses "attestation" only about its SOC 2 audit. An offer sold on request would not show there. VoltageGPU Confidential VMs are Intel TDX trust domains, and NVIDIA GPU attestation from inside the VM is verified on single-GPU H200, single-GPU RTX PRO 6000 Blackwell, single-GPU H100, 8x H200 and 8x H100 machines, with the evidence published for each.

Does VoltageGPU have SOC 2 or sign a HIPAA BAA?

No. VoltageGPU holds no SOC 2 report (SOC 2 Type I is a target for Q4 2026, not held), no ISO certification, and does not sign HIPAA Business Associate Agreements today. RunPod has completed SOC 2 Type II, holds ISO/IEC 27001:2022 and says BAAs are available (ask it for the conditions): if your reviewer requires those, RunPod can meet that requirement and we cannot. What we offer instead is an Intel TDX quote and, on the verified configurations, a NVIDIA GPU attestation report, both generated by you inside the VM.

Which is cheaper, VoltageGPU or RunPod?

RunPod is cheaper per hour. On 7 November 2026 its pricing page listed Secure Cloud H100 SXM at $3.99/hr and H200 at $5.29/hr (no TEE), against $6.95/hr and $9.00/hr for a confidential VM on VoltageGPU; Community Cloud starts lower, from $2.69/hr for an H100 SXM and $3.59/hr for an H200. It also lists B200 at $7.99/hr and A100 cards, which we do not offer as confidential VMs. Both bill per second. The gap pays for the confidential stack; for data that does not need it, RunPod is the cheaper choice.

Cheap GPU or confidential GPU, pick the right tool

RunPod is the right answer for workloads that a contract and an audit report cover, at a lower hourly price. VoltageGPU is the right answer when the technical measure has to be enforced by hardware. Start a confidential VM or read the full architecture.

Start a confidential VM Architecture & attestation