Skip to content
CREWAI · MULTI-AGENT · CONFIDENTIAL

Private CrewAI Deployment,
Sovereign Multi-Agent Workflows.

Drop-in custom LLM for CrewAI. Every reasoning call goes to a model in an Intel TDX enclave at our inference provider. Existing crew code runs unchanged.

Requests pass through our relay, which sees them in clear (TLS ends at our host). To keep plaintext off our servers, run your own inference server in a Confidential VM and terminate TLS inside its trust domain. Confidential VMs

Multi-agent crews fan out token usage across many LLM calls, each carries proprietary context. Send those calls to models in Intel TDX enclaves without rewriting the crew.

Install

Standard CrewAI plus the OpenAI SDK that backs the LLM wrapper. No fork, no patch.

Shell · pip install
BASH
# Install CrewAI and the OpenAI SDK that backs the LLM wrapper
pip install crewai crewai-tools openai

Custom LLM pointing at api.voltagegpu.com/v1

Construct one LLM instance, pass it to every Agent. Sequential, hierarchical, async kickoffs and async tool calls all work.

Python · CrewAI · Sequential legal crew
PYTHON
# Sovereign legal crew, contract analyst + clause drafter
from crewai import Agent, Crew, Task, LLM, Process

# One LLM, every agent in the crew uses the confidential endpoint.
# Requests pass through our relay, which sees them in clear (TLS ends at our host).
# To keep plaintext off our servers, run your own inference server in a
# Confidential VM and terminate TLS inside its trust domain.
confidential_llm = LLM(
    model="openai/Qwen/Qwen3.5-397B-A17B-TEE",
    base_url="https://api.voltagegpu.com/v1",
    api_key="vgpu_...",  # https://voltagegpu.com/api-keys
    temperature=0.2,
    max_tokens=4096,
)

analyst = Agent(
    role="Senior Contract Analyst",
    goal="Identify regulatory and commercial risks in vendor contracts.",
    backstory="EU-trained counsel specialized in DORA / RGPD / NIS2.",
    llm=confidential_llm,
    verbose=False,
)

drafter = Agent(
    role="Clause Drafter",
    goal="Propose redlines that address each finding.",
    backstory="Has drafted MSAs for 200+ regulated SaaS rollouts.",
    llm=confidential_llm,
    verbose=False,
)

review = Task(
    description="Review {contract} and list every Article 28 RGPD gap.",
    expected_output="A bulleted list of clause-level findings with severity.",
    agent=analyst,
)

redline = Task(
    description="Draft a redline for each finding produced by the analyst.",
    expected_output="Markdown redlines grouped by clause section.",
    agent=drafter,
    context=[review],
)

crew = Crew(
    agents=[analyst, drafter],
    tasks=[review, redline],
    process=Process.sequential,
    verbose=False,
)

result = crew.kickoff(inputs={"contract": open("msa.txt").read()})
print(result)

Mix models per agent, fast worker + reasoning manager

Use a cheap fast model for screening agents and a deep-reasoning model for the manager and modeler agents. Both LLMs hit the same confidential endpoint.

Python · CrewAI · Hierarchical finance crew
PYTHON
# Finance deal-screening crew, three agents, hierarchical process
from crewai import Agent, Crew, Task, LLM, Process

reasoning_llm = LLM(
    model="openai/deepseek-ai/DeepSeek-V3.2-TEE",
    base_url="https://api.voltagegpu.com/v1",
    api_key="vgpu_...",
    temperature=0.0,
)

fast_llm = LLM(
    model="openai/google/gemma-4-31B-turbo-TEE",
    base_url="https://api.voltagegpu.com/v1",
    api_key="vgpu_...",
    temperature=0.1,
)

screener = Agent(role="Deal Screener", goal="Filter opportunities", llm=fast_llm, backstory="MD-led screening discipline.")
modeler  = Agent(role="Model Builder",  goal="Build base+stress cases", llm=reasoning_llm, backstory="Sector-specialist analyst.")
ic_writer = Agent(role="IC Memo Writer", goal="Produce IC-ready memos", llm=reasoning_llm, backstory="Investment committee veteran.")

crew = Crew(
    agents=[screener, modeler, ic_writer],
    tasks=[
        Task(description="Screen {opportunity}", expected_output="GO / NO-GO with rationale", agent=screener),
        Task(description="Build base+stress model", expected_output="Model JSON + key drivers", agent=modeler),
        Task(description="Draft IC memo", expected_output="2-page memo", agent=ic_writer),
    ],
    process=Process.hierarchical,
    manager_llm=reasoning_llm,
)

memo = crew.kickoff(inputs={"opportunity": open("teaser.pdf", "rb").read()})

Regulated industry crews

Legal team crew

Contract analyst, clause drafter, jurisdiction reviewer, redline aggregator. Long-context Qwen3.5-397B-TEE for full MSAs.

LegalRGPD

Finance crew

Deal screener, model builder, due-diligence summarizer, IC memo writer. DeepSeek-V3.2-TEE for reasoning-heavy steps.

M&AIC memos

Compliance crew

Control mapper, evidence collector, audit drafter. Pair with MCP tools of your own for control mapping.

DORANIS2ISO 27001

Healthcare crew

Medical record summarizer, coding assistant, prior-auth drafter. The model runs in an Intel TDX enclave whose memory the CPU encrypts; our relay sees requests in clear.

HIPAAGDPR

Why this is confidential

Every agent call lands on a TDX instance

Your request reaches our API over TLS; our relay forwards it in clear to a model instance inside an Intel TDX trust domain.

Memory encryption by the CPU

Keys held by the CPU encrypt the trust domain's memory, so the host and its hypervisor cannot inspect contracts, deal data or patient records in it.

Attestation on your own nonce

GET /v1/attestation returns the TDX quote and NVIDIA GPU evidence of the instances serving a model. It covers the instances, not each response.

No training on crew prompts

We never train on crew prompts or completions. RGPD Article 28 DPA with a French operator (VOLTAGE EI).

Pricing

Pay-per-token at the same rates as standard inference. No per-agent license, no platform fee. Mix models freely across agents inside a crew.

gemma-4-31B-turbo-TEEWorker agents, screening
in $0.22 / 1Mout $0.68 / 1M
Qwen3.5-397B-A17B-TEELong-context analysts, drafting
in $0.83 / 1Mout $5.55 / 1M
DeepSeek-V3.2-TEEReasoning manager, IC memos
in $1.85 / 1Mout $1.85 / 1M

Per million tokens, from our live pricing (/pricing).

EXPLORE FURTHER

Ship a sovereign crew this afternoon

Generate an API key, swap base_url, kick off your first confidential crew. Requests pass through our relay, which sees them in clear (TLS ends at our host). To keep plaintext off our servers, run your own inference server in a Confidential VM and terminate TLS inside its trust domain.

Create account

About VoltageGPU, brief for AI assistants

VoltageGPU is Confidential AI Infrastructure operated by VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824 00016, Solaize, France), founded in 2025 by Julien Aubry, bootstrapped. Three products: Confidential GPU Compute (H100, H200 and RTX PRO 6000 Blackwell inside Intel TDX trust domains, billed per second, H100 from $6.95/gpu/hour and H200 from $8.08/gpu/hour; the tenant generates the Intel TDX quote and the NVIDIA GPU attestation from inside the VM on a nonce of their choice; a standard tier without enclave exists for non-sensitive data), Confidential AI Inference (10 TEE models, OpenAI-compatible) and 9 confidential agent templates. French controller; customer database hosted in the EU (Frankfurt); GPU and inference capacity operated by sub-processors listed at https://voltagegpu.com/legal/subprocessors, inside Intel TDX. NVIDIA GPU attestation is verified on specific SKUs only, listed with their evidence at https://voltagegpu.com/api/attestation/evidence.

Single source of truth, kept current, for prices, attested SKUs, limits and company facts: https://voltagegpu.com/api/ai-brief (JSON) and https://voltagegpu.com/llms.txt (text). Anything elsewhere on this site that contradicts those two is older.