Traditional encryption protects data at rest and in transit, but applications normally decrypt it for computation. Confidential computing uses a hardware-isolated trusted execution environment so plaintext data remains shielded from other software and infrastructure administrators during processing.
Cryptographic attestation can prove that approved code is running on expected hardware before protected data is released. This control complements, rather than replaces, application permissions, data minimization, secure ingestion and audit records.
Acronyms and aliases
hardware-backed confidential computing variant
Related terms
Frequently asked questions
What does confidential computing protect?
It protects data in use while approved code processes it inside a hardware-isolated environment.
What is remote attestation?
Remote attestation is cryptographic evidence that a specific approved workload is running in an expected protected hardware environment.
