Private CrewAI Deployment,
Sovereign Multi-Agent Workflows.
Drop-in custom LLM for CrewAI. Every reasoning call goes to a model in an Intel TDX enclave at our inference provider. Existing crew code runs unchanged.
Requests pass through our relay, which sees them in clear (TLS ends at our host). To keep plaintext off our servers, run your own inference server in a Confidential VM and terminate TLS inside its trust domain. Confidential VMs
Multi-agent crews fan out token usage across many LLM calls, each carries proprietary context. Send those calls to models in Intel TDX enclaves without rewriting the crew.
Install
Standard CrewAI plus the OpenAI SDK that backs the LLM wrapper. No fork, no patch.
Custom LLM pointing at api.voltagegpu.com/v1
Construct one LLM instance, pass it to every Agent. Sequential, hierarchical, async kickoffs and async tool calls all work.
Mix models per agent, fast worker + reasoning manager
Use a cheap fast model for screening agents and a deep-reasoning model for the manager and modeler agents. Both LLMs hit the same confidential endpoint.
Regulated industry crews
Legal team crew
Contract analyst, clause drafter, jurisdiction reviewer, redline aggregator. Long-context Qwen3.5-397B-TEE for full MSAs.
Finance crew
Deal screener, model builder, due-diligence summarizer, IC memo writer. DeepSeek-V3.2-TEE for reasoning-heavy steps.
Compliance crew
Control mapper, evidence collector, audit drafter. Pair with MCP tools of your own for control mapping.
Healthcare crew
Medical record summarizer, coding assistant, prior-auth drafter. The model runs in an Intel TDX enclave whose memory the CPU encrypts; our relay sees requests in clear.
Why this is confidential
Every agent call lands on a TDX instance
Your request reaches our API over TLS; our relay forwards it in clear to a model instance inside an Intel TDX trust domain.
Memory encryption by the CPU
Keys held by the CPU encrypt the trust domain's memory, so the host and its hypervisor cannot inspect contracts, deal data or patient records in it.
Attestation on your own nonce
GET /v1/attestation returns the TDX quote and NVIDIA GPU evidence of the instances serving a model. It covers the instances, not each response.
No training on crew prompts
We never train on crew prompts or completions. RGPD Article 28 DPA with a French operator (VOLTAGE EI).
Pricing
Pay-per-token at the same rates as standard inference. No per-agent license, no platform fee. Mix models freely across agents inside a crew.
Per million tokens, from our live pricing (/pricing).
EXPLORE FURTHER
Parent pillar
Deploy a confidential GPU as tool calls
Architectural overview
OpenAPI spec
Python / TS / Go
Installable crew playbooks
Persistent crew workspaces with RAG
Cron-driven background runs
Gmail · Drive · Slack · GitHub · M365
Ship a sovereign crew this afternoon
Generate an API key, swap base_url, kick off your first confidential crew. Requests pass through our relay, which sees them in clear (TLS ends at our host). To keep plaintext off our servers, run your own inference server in a Confidential VM and terminate TLS inside its trust domain.