VoltageGPU (VOLTAGE EI, France, SIREN 943808824) is not affiliated with Voltage Park (US, merged into Lightning AI January 2026).
Two products that share a word and almost nothing else. Voltage Park was a US H100 farm built for raw scale; VoltageGPU is European confidential compute built for regulated workloads. The price comparison only matters once you decide which problem you are actually solving.
Hourly list price per GPU SKU. ", " means the SKU is not publicly available from that provider. VoltageGPU prices are the canonical confidential-compute floor and stay in sync with /pricing.
| GPU | VRAM | VoltageGPU | Voltage Park |
|---|---|---|---|
| NVIDIA H100 | 80 GB | $5.00/hr Intel TDX confidential | $1.99/hr no TDX, no GPU TEE |
| NVIDIA H200 | 141 GB | $6.58/hr Intel TDX confidential | , not publicly available |
| NVIDIA B200 | 180 GB | $10.60/hr listed, never available to date, not attested | , reserve only, long-term contract |
Voltage Park was built to do one thing well: lease NVIDIA H100 GPUs at the lowest possible hourly rate to AI researchers and venture-backed startups in the United States. The fleet sits in Texas, the billing entity is now Lightning AI, and the value proposition is raw FLOPS per dollar. There is no confidential computing layer, no hardware attestation, no GDPR Article 28 framework, and no European operator on the contract. For a researcher who needs cheap H100 to fine-tune a model nobody will ever audit, that is a perfectly rational design.
VoltageGPU was built for the opposite buyer. The operator is VOLTAGE EI, a French entity registered in Solaize under SIREN 943 808 824, and the product is hardware-sealed confidential compute on Intel TDX with the GPU passed through into the trust domain. The threat model assumes the buyer cannot afford to send client data through an infrastructure where the operator can technically read it, law firms with bar-association duties, accountants with client confidentiality, clinics with patient records, fintech teams with PCI DSS scope. The price is structurally higher because the silicon costs more and the workload runs encrypted end to end, including across the PCIe bus.
The naming overlap is unfortunate and the merger into Lightning AI in January 2026 has scrambled search results further. If a comparison query landed here looking for the cheapest US H100 farm, the honest answer is that VoltageGPU is not that product and Lightning AI (the new home of Voltage Park) is the right choice. If a comparison query landed here because a regulator, a CISO, or a client asked where the data physically lives and who can read it, VoltageGPU is built for that question and Voltage Park was not.
The most common misread of confidential computing is treating it as a software switch on top of an ordinary GPU cloud. It is not. The boundary is set in silicon: Intel TDX encrypts the VM memory with AES-256 against an ephemeral per-VM key, trust-domain GPU passthrough encrypts the bus traffic between CPU and GPU, and an Intel DCAP attestation quote signs the whole configuration with an Intel-root certificate that any verifier can re-check offline. Either a provider deployed the SKUs and stood up the attestation service, or it did not. Voltage Park did not.
On VoltageGPU every confidential pod boots inside a TDX guest, exposes the attestation quote as a first-class endpoint, and the GPU itself sits inside the trust boundary. The PCIe link is AES-encrypted in hardware so model weights, prompt tensors, and output tokens never cross the bus in the clear. The operator, VOLTAGE EI, is mathematically constrained from reading workload memory. That is the language a CNIL or HDS auditor needs in the technical measures clause of a GDPR Article 28 Data Processing Agreement, and it is the language Voltage Park has no architecture to provide.
On Voltage Park (and now Lightning AI for the same hardware) the GPU is leased on a standard hypervisor. There is no TDX module, no GPU TEE, no attestation chain rooted in Intel silicon, no trust-domain GPU passthrough. From a Cloud Act exposure point of view the operator is a US Delaware corporation with full administrative access to the host, which is the failure mode that triggers most European compliance reviews on US hyperscaler GPU compute. None of this is a Voltage Park bug, it is what their product was designed to be.
A confidential H100 on VoltageGPU costs $5.00/hr (live price). A standard H100 on Voltage Park (Lightning AI) costs $1.99 per hour (verified May 2026). That delta is the entire reason this comparison page exists, and it is worth being precise about what each side of the trade actually contains.
The Voltage Park price buys an NVIDIA H100 80GB SXM5 GPU in a US data centre, leased through a standard hypervisor with no hardware isolation between the workload and the cloud operator. For training runs on public data, for evaluation suites, for academic research where the model itself is the asset and the inputs are non-sensitive, this is the rational price floor and there is no good reason to pay more.
The VoltageGPU price buys the same H100 silicon but inside an Intel TDX guest with AES-256 memory encryption, the GPU passed through into the trust domain, and an Intel DCAP attestation endpoint that an auditor can verify offline against the Intel root. The operator is a French entity inside European jurisdiction, the Data Processing Agreement is signed against the French legal framework, and the cryptographic evidence that the operator cannot read workload memory is delivered fresh for every session. For client files protected by bar-association secrecy, for patient records under HDS scope, for financial advice under MiFID II, the extra dollars per hour are the technical measure that lets the workload exist on cloud GPU at all.
On NVIDIA H200 141GB the comparison no longer holds: VoltageGPU sells confidential H200 at $6.58/hr; Voltage Park / Lightning AI did not list an H200 SKU publicly as of May 2026. On NVIDIA B200 180GB the same applies, VoltageGPU sells confidential B200 at $10.60/hr, per-second billed, while Voltage Park reserve-tier capacity for B200 was available only under multi-year long-term contracts. For buyers who need next-generation Hopper or Blackwell on-demand, the cheap H100 reference price is no longer the right comparison.
No. VoltageGPU is operated by VOLTAGE EI, a French sole-proprietorship registered under SIREN 943 808 824 in Solaize, France. Voltage Park was a separate US company that operated NVIDIA H100 capacity out of Texas data centres until it was acquired by Lightning AI in January 2026 and absorbed into the Lightning compute platform. The two products share a substring in their names; they do not share founders, capital, or infrastructure.
Because the two products are not the same SKU. Voltage Park (now Lightning AI) sells NVIDIA H100 SXM5 on a standard hypervisor at $1.99 per hour (verified May 2026): no Intel TDX, no trust-domain GPU passthrough, no attestation, and no European operator on the contract. VoltageGPU sells NVIDIA H100 80GB confidential at $5.00/hr, live price: Intel TDX guest, GPU inside the trust domain, Intel DCAP attestation, French operator. The delta is the entire confidential compute stack. For workloads where that stack is not required, paying it is irrational; for workloads under bar-association secrecy, GDPR sensitive-data scope, HDS, or PCI DSS, paying it is the architectural prerequisite.
If the workload is public-data fine-tuning, evaluation, academic research, or any setup where the cloud operator reading the GPU memory would not create a legal or contractual problem, yes, Lightning AI (which now operates the former Voltage Park fleet) is the price-rational choice for raw H100 capacity. If the workload involves client files protected by professional secrecy, personal data under GDPR Article 9, patient records under HDS, financial advice under MiFID II, or any contract that names hardware attestation in the technical measures clause, Voltage Park / Lightning AI cannot satisfy that requirement and VoltageGPU is structurally the correct provider. The decision is not "which is cheaper" it is "which workload is this".
The legal operator is VOLTAGE EI in Solaize, France, registered under SIREN 943 808 824 00016. The data controller stays inside European jurisdiction; the compute capacity itself is operated by US sub-processors, listed on our sub-processors page, and runs inside Intel TDX enclaves the operator cannot read. Every customer signs a GDPR Article 28 Data Processing Agreement under French law. The technical measures clause is backed by Intel DCAP attestation, the operator is mathematically constrained from reading workload memory, and the cryptographic evidence to that effect is produced fresh for every confidential session. This is the regulatory posture CNIL, ANSSI, and similar European authorities have started to require for cloud AI on high-sensitivity personal data. Voltage Park (Lightning AI Inc., Delaware) cannot offer the same posture because the US legal framework does not constrain the operator the same way and the underlying hardware is not configured for confidential computing.
For inference workloads the migration is a same-day exercise. VoltageGPU exposes an OpenAI-compatible inference API at api.voltagegpu.com/v1, the same endpoints, request bodies, and SDK shapes as OpenAI / Together / Anyscale, so existing client code typically requires only a base_url change. For training and fine-tuning workloads the SSH-accessible confidential pod is a drop-in replacement for a standard GPU VM: same Docker images, same CUDA toolchain, same NVIDIA drivers, with the addition of an attestation report exposed on the pod page from the first session. The structural differences are billing (per-second instead of per-hour), operator (French instead of US Delaware), and hardware path (Intel TDX + trust-domain GPU passthrough instead of standard hypervisor). Nothing in the workload code itself needs to change.
VoltageGPU exists for regulated workloads that need cryptographic evidence the operator cannot read the data. Start a confidential pod in under five minutes or read the full architecture.