About
Edgeless Systems is a confidential computing company that enables organizations to protect sensitive data, AI workloads, and cloud-native applications from unauthorized access—including by cloud operators themselves. Their solutions leverage Trusted Execution Environments (TEEs) such as Intel SGX, AMD SEV-SNP, and Intel TDX to ensure data remains encrypted not just at rest and in transit, but also during processing at runtime. Their flagship product, Privatemode AI, is a fully encrypted AI service that allows organizations to use AI models without exposing prompts or data to the service provider. Contrast is a platform for building, managing, and scaling confidential containers on Kubernetes using SEV-SNP and TDX. MarbleRun enables orchestration and scaling of Intel SGX enclaves in distributed environments. Edgeless Systems supports a wide range of compliance use cases including GDPR, DORA, and NIS2, making them particularly valuable in regulated industries like healthcare, financial services, public sector, and telecommunications. Remote attestation cryptographically verifies that data is protected at all times, and operator access can be fully excluded from the trusted computing base. The platform is trusted by enterprises, university clinics, and sovereign cloud providers. It is well-suited for security engineers, DevOps teams, and enterprise architects looking to achieve true digital sovereignty without expanding on-premises infrastructure.
Key Features
- Always-On Runtime Encryption: Data stays encrypted even while being processed, using Trusted Execution Environments (TEEs) like Intel SGX, AMD SEV-SNP, and Intel TDX.
- Privatemode AI: A fully encrypted AI service that lets organizations use AI without exposing prompts, data, or model details to any third party.
- Confidential Kubernetes with Contrast: Build, manage, and scale confidential containers on Kubernetes using SEV-SNP and TDX, enabling cloud-native workloads with maximum privacy.
- Remote Attestation: Cryptographically verifies that data is protected and the system is operating as expected, giving users provable assurance of security.
- Compliance-Ready Architecture: Built to support GDPR, DORA, and NIS2 compliance requirements, with operator access fully excluded from the trusted computing base.
Use Cases
- Healthcare organizations migrating sensitive patient data workloads to the cloud while maintaining full encryption and regulatory compliance.
- Financial services firms running AI models and analytics on confidential customer data without exposing it to cloud infrastructure operators.
- Public sector agencies achieving digital sovereignty by ensuring government data is never accessible to third-party cloud providers.
- Enterprises building multi-party computation pipelines where multiple organizations collaborate on sensitive data without any party seeing the raw inputs.
- AI developers and businesses protecting proprietary model weights and user prompts when deploying AI services in public cloud environments.
Pros
- True Data Isolation: Cloud operators and service providers are excluded from the trusted computing base, ensuring no unauthorized access to sensitive data or AI prompts.
- Open Source Roots: Core tools like MarbleRun are available as open source, enabling transparency, community contributions, and vendor trust verification.
- Enterprise-Grade Compliance: Purpose-built for regulated industries, supporting GDPR, DORA, and NIS2 requirements out of the box.
- Cloud Scalability Without On-Prem Expansion: Enables digital sovereignty and sensitive workload protection at cloud scale, removing the need to grow costly on-premises infrastructure.
Cons
- Steep Learning Curve: Confidential computing concepts like TEEs, attestation, and enclave orchestration require specialized knowledge to implement effectively.
- Enterprise-Focused Pricing: The commercial products are primarily aimed at large enterprises, which may make costs prohibitive for smaller teams or startups.
- Hardware Dependencies: Some solutions require specific hardware support (Intel SGX, AMD SEV-SNP, Intel TDX), which may limit deployment environments.
Frequently Asked Questions
What is confidential computing?
Confidential computing is a security approach that protects data while it is being processed (in use), using hardware-based Trusted Execution Environments (TEEs). This complements traditional encryption at rest and in transit.
What is Privatemode AI?
Privatemode AI is Edgeless Systems' flagship AI service that ensures all data—including prompts and model interactions—remains fully encrypted at all times, even from the AI service provider itself.
What is the difference between Contrast and MarbleRun?
Contrast is used to manage and scale confidential containers on Kubernetes using AMD SEV-SNP and Intel TDX. MarbleRun is designed for orchestrating Intel SGX-based enclaves in distributed systems.
Which compliance standards does Edgeless Systems support?
Edgeless Systems solutions are built to help organizations meet GDPR, DORA, and NIS2 compliance requirements, making them suitable for healthcare, financial services, and public sector use cases.
Is any part of Edgeless Systems' software open source?
Yes, MarbleRun and Constellation are available as open source on GitHub, allowing organizations to inspect, contribute to, and build upon the core confidential computing framework.
