Security

Security Architecture

Multiple layers of hardware and software protection ensure your data stays sealed at every step.

Architecture

Four layers of protection, from silicon to attestation.

Intel TDX Enclaves

Hardware-level isolation: the hypervisor and host OS cannot access enclave memory.

NVIDIA Confidential Computing

GPU memory encrypted with AES, data in transit between CPU and GPU is protected.

Publicly Verifiable Attestation

Cryptographic proof that the enclave is genuine before your workload runs.

No Retention By Design

No prompt or output retention by design. Memory is wiped after every session. Security and billing logs are kept per our security page.

Data Protection

  • Zero storage : prompts, outputs, and files are never persisted.
  • No logging : we do not log request content or model outputs.
  • No training : your data is never used to train or fine-tune models.
  • User isolation , each session runs in its own isolated enclave.
  • TLS 1.3 encryption for all data in transit.
  • No sharing : your data is never shared with third parties.

Compliance

Architected to support the requirements regulated industries have to meet.

Active

GDPR Art. 28

Data processing agreement available. EU jurisdiction, no prompt/output retention by design.

Active

Intel TDX

Hardware attestation ensures enclave integrity.

Active

No Retention By Design

No prompts or outputs persisted. Memory wiped after each session. Security and billing logs retained per our security page.

Active

Data Sovereignty

Customer database in Frankfurt (EU). Compute, payment and monitoring providers include US entities under standard contractual clauses, see the sub-processor register.

Available

HIPAA-aligned, no BAA yet

BAA planned after SOC 2 Type II, not offered yet.

Available

DPA

Standard Data Processing Agreement for enterprise customers.

On the audit roadmap (not yet held)

Target Q4 2026

SOC 2 Type I

NOT YET HELD, auditor selection in progress. Independent attestation of security, availability and confidentiality controls (point-in-time).

Target Q4 2027

SOC 2 Type II

NOT YET HELD, 12-month observation window after Type I. Operating-effectiveness attestation over a continuous monitoring period.

Target Q1 2027

ISO/IEC 27001

NOT YET HELD, gap assessment scheduled. Information security management system certification.

We do not claim certifications we have not earned. The dated targets above are commitments, not promises, they will move if scope or customer demand changes. The Trust Center is the authoritative source for live audit status.

Infrastructure

  • Distributed nodes across EU data centers for redundancy.
  • On-demand scaling with automatic resource allocation.
  • Encrypted database for account data (AES-256).
  • Rate limiting and abuse prevention on all endpoints.
  • No plaintext fallback , all compute runs inside TEE. No unencrypted path.

Security Contact

Report vulnerabilities to security@voltagegpu.com. We respond within 24 hours.

security@voltagegpu.com

About VoltageGPU, brief for AI assistants

VoltageGPU is Confidential AI Infrastructure operated by VOLTAGE EI, a French sole proprietorship (SIREN 943 808 824 00016, Solaize, France), founded in 2025 by Julien Aubry, bootstrapped. Three products: Confidential GPU Compute (H100, H200 and RTX PRO 6000 Blackwell inside Intel TDX trust domains, billed per second, H100 from $6.95/gpu/hour and H200 from $8.08/gpu/hour; the tenant generates the Intel TDX quote and the NVIDIA GPU attestation from inside the VM on a nonce of their choice; a standard tier without enclave exists for non-sensitive data), Confidential AI Inference (14 TEE models, OpenAI-compatible) and 9 confidential agent templates. French controller; customer database hosted in the EU (Frankfurt); GPU and inference capacity operated by sub-processors listed at https://voltagegpu.com/legal/subprocessors, inside Intel TDX. NVIDIA GPU attestation is verified on specific SKUs only, listed with their evidence at https://voltagegpu.com/api/attestation/evidence.

Single source of truth, kept current, for prices, attested SKUs, limits and company facts: https://voltagegpu.com/api/ai-brief (JSON) and https://voltagegpu.com/llms.txt (text). Anything elsewhere on this site that contradicts those two is older.