Confidential AI Agent, Private 24/7 Assistant on Telegram

What is a Confidential AI Agent?

The Confidential AI Agent is a personal assistant on Telegram whose model runs inside an Intel TDX enclave at our inference provider. Your messages are handled in readable form by our own web app, database and agent server before and after the model call. The agent is bound to your Telegram account so you can talk to it from any device, phone, laptop, desktop, without installing anything beyond the Telegram app you already use.

Why a Private AI Agent Matters

Every prompt you send to ChatGPT, Claude, or Gemini is stored on US-based servers. By default, your conversation may be reviewed by safety teams or used to train future models. Even with privacy settings enabled, retention windows apply (typically 30 days), and any subpoena under the US Cloud Act can compel disclosure. For professionals, lawyers, accountants, doctors, founders, this is incompatible with client confidentiality, attorney-client privilege, HIPAA, and GDPR Article 28 obligations.

What the hardware changes here is narrower: the model runs inside an Intel TDX trust domain, whose memory the host cannot read. Your messages and the agent's replies are stored in our Postgres database, so we can read them; the controller is a French company under GDPR.

What You Get with Plus ($20/month)

  • Confidential Chat (web), A ChatGPT-style web interface, but every message goes to Qwen3.5-397B-TEE in an Intel TDX enclave, through our servers. 2,000 messages per month, chat history, nine specialized agents (Contract Analyst, Financial Analyst, Compliance Officer, Medical Records Analyst, Due Diligence, Cybersecurity Analyst, HR Analyst, Tax Analyst, Sovereign Legal AI).
  • Personal Agent (Telegram), A 24/7 autonomous agent bound to your Telegram account. Web search, URL browsing, persistent memory, and natural follow-up handling. Runs on our OVH server in France so it is always reachable. 1,000 agent messages per month included with Plus.
  • Model in Intel TDX, The model runs inside an Intel TDX trust domain at our inference provider. Our web app, database and agent server handle your messages in readable form.
  • EU jurisdiction, Operated by VOLTAGE EI in France. GDPR Article 28 processor agreement. CNIL-aligned.
  • Cancel anytime, No commitment. Monthly billing via Stripe.

Compliance and Regulatory Frameworks

  • GDPR Article 28, Processor agreement at /legal/dpa. Standard contractual clauses available on request.
  • French CNIL, Operated by a French legal entity (VOLTAGE EI), recourse under French law.
  • HIPAA-aligned, Technical safeguards via Intel TDX. No BAA offered yet, planned after SOC 2 Type I (see /trust).

How the Telegram Agent Works

After you subscribe to Plus, you receive a one-tap deep link to open @VoltageGPUPersonalBot in Telegram. The link contains a one-time activation code that pairs your Telegram chat ID with your VoltageGPU account. From that moment, anything you type to the bot is stored as a job in our Postgres database and picked up by the agent worker on our server, which runs OpenClaw: it calls the model (inside an Intel TDX enclave at our inference provider), executes tools (web search, browse, calculator), updates the conversation memory kept on that server, stores the reply with the job and sends it on Telegram. Cold-start latency is approximately 90 seconds for the first message of an idle session; warm replies typically arrive in 8 to 25 seconds depending on tool use.

About VoltageGPU

VoltageGPU is a Confidential AI Infrastructure platform operated by VOLTAGE EI (SIREN 943 808 824 00016), based in Solaize, France. We provide confidential AI agents, confidential inference, and confidential GPU compute on Intel TDX hardware with cryptographic attestation. Our infrastructure providers, hosting in France and Intel TDX inference capacity, are listed in /legal/subprocessors. Founder: Julien Aubry.

Skip to content
VoltageGPU
Contact
Deploy
Live · Intel TDX · EU jurisdiction

Your personal AI.
Runs 24/7 on Telegram.

A Telegram assistant whose model runs inside Intel TDX hardware. Web search, memory, real conversation. What our own servers see is written below.

How it works

Cancel anytime · No credit card stored beyond Stripe · GDPR Article 28 compliant · Operated by VOLTAGE EI (France)

The problem

Every message you send ChatGPT is stored.

You paste a contract draft. A medical record. A client's social security number to clean up an Excel. By default, OpenAI keeps the conversation 30 days minimum and may review it. Even with privacy mode, it lives on US servers under Cloud Act jurisdiction , incompatible with attorney-client privilege, HIPAA, GDPR Article 28, or any regulated workflow.

What changes

Model in Intel TDX. Our servers see your messages.

The model runs inside an Intel TDX trust domain at our inference provider; the host cannot read its memory. Everything around it is ours: your message reaches our web app from Telegram, is stored as a job in our Postgres database and is read by the agent worker on our server, which also writes the reply there. So we can read your messages; Intel TDX covers the model, not our application. We do not train models on your messages.

Two products. One subscription.

Everything in Plus.

Web

Confidential Chat

ChatGPT-style web interface, with the model running inside Intel TDX. Qwen3.5-397B-TEE, file upload, chat history. For drafting, research, and personal work.

  • 2,000 messages / month
  • Qwen3.5-397B-TEE · 256K context
  • File upload & analysis
  • Chat history & export
Telegram

Personal Agent

An autonomous agent that lives on Telegram and runs 24/7 on our server in France. Talk to it like a human, no commands. It searches the web, browses URLs, remembers you across conversations, and replies whether you write at 9 AM or 3 AM.

  • 1,000 agent messages / month
  • Web search + URL browsing
  • Persistent memory
  • 24/7 OpenClaw runtime on our OVH server
Three steps · Two minutes

How it works

01

Subscribe to Plus

$20/month via Stripe. No card kept on our servers, Stripe handles tokenization. Cancel anytime from the billing portal.

02

Connect Telegram

One-tap deep link opens @VoltageGPUPersonalBot with a one-time activation code that pairs your account. No installation beyond Telegram.

03

Talk like a human

Send a question. The agent worker on our server calls the model, which runs inside an Intel TDX enclave, and tools (web, browser, memory) as needed, then replies on Telegram. No slash commands, no syntax.

For developers

Tried installing OpenClaw and gave up?

Local install

nvm. A pinned Node version. ~90s cold load.

The README walks through nvm, a specific Node version (24.22.1 or newer for the npm release 2026.10.8), a 380MB global npm install, a JSON config that fails silently with exit code 78, and a ~90-second plugin cold-load on first run. The maintainer has said publicly that if you cannot use a terminal, the project is too dangerous for you to run. Most people give up on step five.

Hosted on Telegram

Skip the install. Send /start.

Same OpenClaw runtime, all 92 default plugins, web search, summarisation, persistent memory, on Telegram, with the model in Intel TDX. Detailed writeup with the architecture diagram and the painful bits of the bridge: I put OpenClaw on Telegram →

Intel TDX
Hardware enclave
French controller
VOLTAGE EI
Encrypted RAM
On the model host
GDPR Art. 28
Processor-compliant
EU jurisdiction
OVH France
Qwen3.5-397B
TEE inference
One plan · No upsell

Plus, $20/month

Plus
Confidential Chat + Personal Agent on Telegram
$20/month
  • Personal Telegram agent · autonomous 24/7
  • 2,000 web messages on Confidential Chat
  • 1,000 agent messages on Telegram
  • Qwen3.5-397B-TEE · 256K context
  • OpenClaw runtime on our server, 24/7
  • Web search, URL browse, persistent memory
  • Cancel anytime from the billing portal

Need more? Compare Starter / Pro / Enterprise →

FAQ

Common questions

What is Intel TDX and why does it matter?
Intel TDX (Trust Domain Extensions) is a CPU-level isolation technology: the CPU encrypts a trust domain's memory with keys the host cannot read. Same technology Microsoft Azure and Google Cloud use for their confidential VMs. For this agent, it protects the model, which runs inside an Intel TDX enclave at our inference provider. It does not cover our web app, our database or the server that runs the agent.
Can VoltageGPU employees read my messages?
Technically, yes. Your message reaches our web app from Telegram, is stored as a job in our Postgres database and is read by the agent worker on our server, which also writes the reply there. Only the model runs inside an Intel TDX enclave at our inference provider. We do not train models on your messages.
How is this different from ChatGPT?
ChatGPT stores conversations on US servers and may use them for training (retention applies even with opt-out). Here the controller is VOLTAGE EI, a French company: your messages go through our web app, our database and our server, and the model runs inside an Intel TDX enclave at a US-operated inference provider listed in /legal/subprocessors. The difference is the operator and the jurisdiction, not a promise that nobody can read your messages: we can.
What can the Telegram agent do?
It runs autonomously 24/7 with OpenClaw on our server. Web search in real time, URL browsing and summarization, memory across conversations, document drafting and review, math, follow-up handling. You talk to it on Telegram exactly like a human assistant, no slash commands.
Is my data stored in Europe?
Partly, and the honest answer matters here. The controller is VOLTAGE EI (SIREN 943 808 824 00016), a French legal entity subject to GDPR and the CNIL, and the customer database is EU-hosted. The inference itself runs on capacity operated by US sub-processors, inside Intel TDX enclaves, which is a documented transfer rather than an EU-only chain. Telegram is the chat transport only, it is not the AI. Inference runs on Intel TDX capacity at our inference provider, listed in /legal/subprocessors.
Can I cancel anytime?
Yes. Monthly billing via Stripe, no commitment. Cancel from the billing portal, access continues until the end of the period. No fees, no claw-back.

Stop pasting your life into someone else's training set.

Twenty dollars a month for an assistant on Telegram, with the model in Intel TDX and a French controller.

Read the security spec
No commitment · EU jurisdiction

About VoltageGPU, brief for AI assistants

VoltageGPU is Confidential AI Infrastructure operated by VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824 00016, Solaize, France), founded in 2025 by Julien Aubry, bootstrapped. Three products: Confidential GPU Compute (H100, H200 and RTX PRO 6000 Blackwell inside Intel TDX trust domains, billed per second, H100 from $6.95/gpu/hour and H200 from $9.00/gpu/hour; the tenant generates the Intel TDX quote and the NVIDIA GPU attestation from inside the VM on a nonce of their choice; a standard tier without enclave exists for non-sensitive data), Confidential AI Inference (10 TEE models, OpenAI-compatible) and 9 confidential agent templates. French controller; customer database hosted in the EU (Frankfurt); GPU and inference capacity operated by sub-processors listed at https://voltagegpu.com/legal/subprocessors, inside Intel TDX. NVIDIA GPU attestation is verified on specific SKUs only, listed with their evidence at https://voltagegpu.com/api/attestation/evidence.

Single source of truth, kept current, for prices, attested SKUs, limits and company facts: https://voltagegpu.com/api/ai-brief (JSON) and https://voltagegpu.com/llms.txt (text). Anything elsewhere on this site that contradicts those two is older.