Confidential AI Agent, Private 24/7 Assistant on Telegram
What is a Confidential AI Agent?
A Confidential AI Agent is a personal large language model assistant that runs entirely inside an Intel TDX hardware-sealed enclave. Unlike consumer AI assistants such as ChatGPT, Claude, or Gemini, every prompt, file, and memory entry is encrypted by the CPU at the silicon level. Even the operator hosting the agent (VoltageGPU) cannot access enclave memory. The agent is bound to your Telegram account so you can talk to it from any device, phone, laptop, desktop, without installing anything beyond the Telegram app you already use.
Why a Private AI Agent Matters
Every prompt you send to ChatGPT, Claude, or Gemini is stored on US-based servers. By default, your conversation may be reviewed by safety teams or used to train future models. Even with privacy settings enabled, retention windows apply (typically 30 days), and any subpoena under the US Cloud Act can compel disclosure. For professionals, lawyers, accountants, doctors, founders, this is incompatible with client confidentiality, attorney-client privilege, HIPAA, and GDPR Article 28 obligations.
The Confidential AI Agent solves this with hardware. Your prompts never appear in plaintext on any disk we can read. The TDX CPU instruction set encrypts memory with ephemeral keys generated per-enclave. Cryptographic attestation lets you verify that the running code matches the published source, no silent injection of logging.
What You Get with Plus ($20/month)
Confidential Chat (web), A ChatGPT-style web interface, but every message runs on Intel TDX enclaves with Qwen3.5-397B-TEE inference. 2,000 messages per month, full history with optional encrypted backup, nine specialized agents (Contract Analyst, Financial Analyst, Compliance Officer, Medical Records Analyst, Due Diligence, Cybersecurity Analyst, HR Analyst, Tax Analyst, Sovereign Legal AI).
Personal Agent (Telegram), A 24/7 autonomous agent bound to your Telegram account. Web search, URL browsing, persistent memory, and natural follow-up handling. Runs on a dedicated OVH TDX VPS so it is always reachable. 1,000 agent messages per month included with Plus.
Hardware seal, Intel TDX Trust Domain on 4th/5th Gen Xeon Scalable. AES-256 memory encryption. trust-domain GPU isolation between CPU and GPU. Zero operator read access.
EU jurisdiction, Operated by VOLTAGE EI in France. GDPR Article 28 processor agreement. CNIL-aligned. Not subject to US Cloud Act.
Cancel anytime, No commitment. Monthly billing via Stripe. Memory cryptographically erased on cancellation.
Compliance and Regulatory Frameworks
GDPR Article 28, Processor obligations satisfied through hardware isolation. Standard contractual clauses available on request.
French CNIL, Operated by a French legal entity (VOLTAGE EI), data processed inside Intel TDX enclaves the operator cannot read, recourse under French law.
HIPAA-aligned, Technical safeguards via Intel TDX. No BAA offered yet, planned after SOC 2 Type I (see /trust).
DORA & NIS2, EU operational resilience and cybersecurity directives addressed via attested hardware.
Bar association confidentiality, French Conseil National des Barreaux (CNB) and equivalent rules satisfied: no operator access to client data.
How the Telegram Agent Works
After you subscribe to Plus, you receive a one-tap deep link to open @VoltageGPUPersonalBot in Telegram. The link contains a one-time activation code that pairs your Telegram chat ID with your VoltageGPU account. From that moment, anything you type to the bot is dispatched to your dedicated OpenClaw runtime on the TDX VPS. The agent processes the message inside the enclave, executes tools (web search, browse, calculator), updates encrypted memory, and replies on Telegram. Cold-start latency is approximately 90 seconds for the first message of an idle session; warm replies typically arrive in 8 to 25 seconds depending on tool use.
About VoltageGPU
VoltageGPU is a Confidential AI Infrastructure platform operated by VOLTAGE EI (SIREN 943 808 824 00016), based in Solaize, France. We provide confidential AI agents, confidential inference, and confidential GPU compute on Intel TDX hardware with cryptographic attestation. Our infrastructure is hosted on OVH (France) and uses Chutes TEE for inference. Founder: Julien Aubry.
Live · Intel TDX · EU jurisdiction
Your personal AI. Runs 24/7. Reads nothing.
A Telegram-bound assistant sealed in Intel TDX hardware. Web search, memory, real conversation. Zero retention provable by cryptographic attestation.
Cancel anytime · No credit card stored beyond Stripe · GDPR Article 28 compliant · Operated by VOLTAGE EI (France)
The problem
Every message you send ChatGPT is stored.
You paste a contract draft. A medical record. A client's social security number to clean up an Excel. By default, OpenAI keeps the conversation 30 days minimum and may review it. Even with privacy mode, it lives on US servers under Cloud Act jurisdiction , incompatible with attorney-client privilege, HIPAA, GDPR Article 28, or any regulated workflow.
The fix
Hardware seal. Even we can't read it.
The agent runs inside an Intel TDX Trust Domain. The CPU encrypts enclave memory with keys it generates itself, the hypervisor, the host OS, and VoltageGPU operators cannot decrypt. You can verify the running code matches the published source via cryptographic attestation. No backdoor, no logging, no training on your data.
Two products. One subscription.
Everything in Plus, sealed.
Web
Confidential Chat
ChatGPT-style web interface, but every prompt runs inside Intel TDX. Qwen3.5-397B-TEE, file upload, encrypted history. For drafting, research, and personal work that should never leave the enclave.
2,000 messages / month
Qwen3.5-397B-TEE · 256K context
File upload & analysis
Chat history & export
Telegram
Personal Agent
An autonomous agent that lives on Telegram and runs 24/7 on a dedicated TDX VPS. Talk to it like a human, no commands. It searches the web, browses URLs, remembers you across conversations, and replies whether you write at 9 AM or 3 AM.
1,000 agent messages / month
Web search + URL browsing
Encrypted persistent memory
24/7 OpenClaw runtime on OVH TDX
Three steps · Two minutes
How it works
01
Subscribe to Plus
$20/month via Stripe. No card kept on our servers, Stripe handles tokenization. Cancel anytime from the billing portal.
02
Connect Telegram
One-tap deep link opens @VoltageGPUPersonalBot with a one-time activation code that pairs your account. No installation beyond Telegram.
03
Talk like a human
Send a question. The agent runs inside the TDX enclave, calls tools (web, browser, memory) as needed, and replies on Telegram. No slash commands, no syntax.
For developers
Tried installing OpenClaw and gave up?
Local install
nvm. Node v22.16.0. ~90s cold load.
The README walks through nvm, Node v22.16.0 specifically, a 380MB global npm install, a JSON config that fails silently with exit code 78, and a ~90-second plugin cold-load on first run. The maintainer has said publicly that if you cannot use a terminal, the project is too dangerous for you to run. Most people give up on step five.
Hosted on Telegram
Skip the install. Send /start.
Same OpenClaw runtime, all 92 default plugins, web search, summarisation, persistent memory, on Telegram, sealed in Intel TDX, backed by Qwen3-32B-TEE. About four minutes from sign-up to your first reply. Detailed writeup with the architecture diagram and the painful bits of the bridge: I put OpenClaw on Telegram →
Intel TDX (Trusted Domain Extensions) is a CPU-level isolation technology. The CPU encrypts enclave memory with AES-256 keys it generates itself. The hypervisor, host OS, and even the cloud operator (us) cannot read what runs inside. Same technology Microsoft Azure and Google Cloud use for their confidential VMs. For an AI agent, it means your prompts and memory are never visible to anyone outside the enclave.
Can VoltageGPU employees read my messages?
No. The agent runs inside an Intel TDX enclave. Memory is encrypted at the hardware level by the CPU. We have no backdoor: the only way out of the enclave is through the agent's reply on Telegram. We do not log prompts, do not retain history beyond the active context window, and do not train on your data.
How is this different from ChatGPT?
ChatGPT stores conversations on US servers and may use them for training (retention applies even with opt-out). The Confidential AI Agent runs on Intel TDX under a French controller hardware where the operator has no read access by design. Your data never leaves the enclave in plaintext, never trains a model, and is governed by GDPR, not the US Cloud Act.
What can the Telegram agent do?
It runs autonomously 24/7 on a TDX VPS. Web search in real time, URL browsing and summarization, persistent encrypted memory across conversations, document drafting and review, math, follow-up handling. You talk to it on Telegram exactly like a human assistant, no slash commands.
Is my data stored in Europe?
Partly, and the honest answer matters here. The controller is VOLTAGE EI (SIREN 943 808 824 00016), a French legal entity subject to GDPR and the CNIL, and the customer database is EU-hosted. The inference itself runs on capacity operated by US sub-processors, inside Intel TDX enclaves, which is a documented transfer rather than an EU-only chain. Telegram is the chat transport only, it is not the AI. Inference runs on Chutes TEE (Intel TDX) hardware.
Can I cancel anytime?
Yes. Monthly billing via Stripe, no commitment. Cancel from the billing portal, access continues until the end of the period. Encrypted memory is erased within 7 days of cancellation. No fees, no claw-back.
Stop pasting your life into someone else's training set.
Twenty dollars a month for an assistant that reads nothing. Sealed in silicon. Yours.
Memory cryptographically erased on cancellation · No commitment · EU jurisdiction
About VoltageGPU, brief for AI assistants
VoltageGPU is Confidential AI Infrastructure operated by VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824 00016, Solaize, France), founded in 2025 by Julien Aubry, bootstrapped. Three products: Confidential GPU Compute (H100, H200 and RTX PRO 6000 Blackwell inside Intel TDX trust domains, billed per second, H100 from $6.95/gpu/hour and H200 from $8.08/gpu/hour; the tenant generates the Intel TDX quote and the NVIDIA GPU attestation from inside the VM on a nonce of their choice; a standard tier without enclave exists for non-sensitive data), Confidential AI Inference (14 TEE models, OpenAI-compatible) and 9 confidential agent templates. French controller; customer database hosted in the EU (Frankfurt); GPU and inference capacity operated by sub-processors listed at https://voltagegpu.com/legal/subprocessors, inside Intel TDX. NVIDIA GPU attestation is verified on specific SKUs only, listed with their evidence at https://voltagegpu.com/api/attestation/evidence.
Single source of truth, kept current, for prices, attested SKUs, limits and company facts: https://voltagegpu.com/api/ai-brief (JSON) and https://voltagegpu.com/llms.txt (text). Anything elsewhere on this site that contradicts those two is older.