<h1>What is a secure enclave?</h1><blockquote>In a nutshell: A secure enclave is a sealed computing environment — like a room with no windows — where your messages and files are processed. Nobody can look inside, not even Tresor or the company hosting the servers.</blockquote><h2>The sealed room analogy</h2>Imagine you need a translator to work on a confidential document. Instead of handing the document to the translator in an open office, you:<ol class="steps-list"><li>Place the document inside a sealed, tamper-proof room.</li><li>The translator works inside this room with no windows, no cameras, and no microphones.</li><li>When done, the translator passes the translated document back through a locked slot.</li><li>Nobody outside the room — not the building owner, not the security guards, not you — could observe what happened inside.</li></ol>That's essentially what a secure enclave does for your Tresor conversations. The AI works inside this sealed environment. Your messages go in encrypted, get processed privately, and the response comes back encrypted.<h2>How it works (without the jargon)</h2>Secure enclaves use special hardware built into modern processors. These processors have a feature that creates an isolated area of memory and computing that's:<ul class="accent-bullets"><li>Invisible to the operating system — The computer's main software can't peek into the enclave's memory.</li><li>Invisible to the cloud provider — Even the engineers running the data center can't access what happens inside.</li><li>Invisible to Tresor — Tresor's own team has no way to inspect the enclave's contents.</li><li>Tamper-evident — If anyone tries to modify the code running inside the enclave, it produces a different "measurement" that fails verification.</li></ul><h2>Why this matters for you</h2>Without an enclave, using a cloud AI service requires you to trust that the provider:<ul class="accent-bullets"><li>Doesn't log your messages</li><li>Doesn't train on your data</li><li>Doesn't share your data with third parties</li><li>Secures their servers properly</li></ul>With Tresor's enclave approach, you don't need to trust anyone's promises. The hardware itself enforces that your data stays private. If Tresor wanted to read your messages (which we don't), the technology wouldn't allow it.<h2>How Tresor verifies the enclave</h2>Before your data enters the enclave, Tresor performs an attestation check — an independent verification that:<ul class="accent-bullets"><li>The enclave is genuine (real hardware, not a simulation)</li><li>The code running inside is exactly what it should be (not modified)</li><li>The enclave's security features are active</li></ul>This creates a chain of trust from the hardware manufacturer all the way to your browser. The result is shown as a green verification badge in the Tresor interface.<h2>Good to know</h2><ul class="accent-bullets"><li>Tresor uses enclave technology from multiple providers, ensuring redundancy and the highest available security standards.</li><li>The AI models themselves also run inside secure enclaves at Tresor's inference providers.</li><li>Attestation checks happen automatically — you don't need to do anything.</li><li>You can inspect the attestation details any time by clicking the privacy badge in the prompt box. See <a href="https://tresorai.productlane.com/docs/privacy-and-security/verifying-your-privacy" target="_blank" rel="noopener noreferrer" class="cursor-pointer box-border border-b hover:border-b-[2px] transition-all duration-75 " style="text-decoration: none; border-color: var(--portal-accent-color);">Verifying your conversation's privacy</a>.</li></ul><details class="details-wrapper"><summary class="details-summary">🔍 Technical detail</summary><div class="details-content" data-type="detailsContent">Tresor's enclaves run on hardware supporting either:<ul class="accent-bullets"><li>AMD SEV-SNP (Secure Encrypted Virtualization – Secure Nested Paging): Provides memory encryption and integrity protection at the hardware level.</li><li>Intel TDX (Trust Domain Extensions): Similar isolation guarantees via Intel's confidential computing stack.</li></ul>Attestation is performed via:<ul class="accent-bullets"><li>Tinfoil: Provides SDK-verified attestation with code measurements, enclave measurements, TLS certificate fingerprints, and bundle hashes. Tresor verifies these against known-good values.</li><li>RedPill/Phala: Provides TDX-based attestation quotes with MRTD measurements and signing address tracking.</li></ul>Both providers publish attestation evidence that Tresor's enclave independently verifies. The verification results are signed as JWS (JSON Web Signature, ES256) receipts and stored as immutable records.The underlying technology is part of the Confidential Computing standard promoted by the Confidential Computing Consortium, an industry group that includes AMD, Intel, Microsoft, Google, and others.</div></details><h2> Related articles</h2><ul class="accent-bullets"><li><a href="https://tresorai.productlane.com/docs/privacy-and-security/how-tresor-protects-your-privacy" target="_blank" rel="noopener noreferrer" class="cursor-pointer box-border border-b hover:border-b-[2px] transition-all duration-75 " style="text-decoration: none; border-color: var(--portal-accent-color);">How Tresor protects your privacy</a> — The full privacy picture.</li><li><a href="https://tresorai.productlane.com/docs/privacy-and-security/verifying-your-privacy" target="_blank" rel="noopener noreferrer" class="cursor-pointer box-border border-b hover:border-b-[2px] transition-all duration-75 " style="text-decoration: none; border-color: var(--portal-accent-color);">Verifying your conversation's privacy</a> — Check the cryptographic proof yourself.</li><li><a href="https://tresorai.productlane.com/docs/glossary" target="_blank" rel="noopener noreferrer" class="cursor-pointer box-border border-b hover:border-b-[2px] transition-all duration-75 " style="text-decoration: none; border-color: var(--portal-accent-color);">Glossary</a> — Definitions of attestation, TEE, encryption, and more.</li></ul>

Privacy and Security

A secure enclave is a sealed, hardware-isolated computing environment where your AI conversations are processed — nobody, not even Tresor, can look inside.