Confidential Computing for LLMs — TrustedRouter
Run LLM routing through confidential computing with GCP Confidential Space, open source gateway code, remote attestation, protected TLS keys, and no prompt logs.
Run LLM inference behind hardware attestation — across every provider.
Confidential computing has been deployable for years. The industry just never put inference behind it. TrustedRouter does: the gateway runs inside GCP Confidential Space and signs the exact binary it's running.
You challenge it with a nonce, get a JWT signed by the CPU's hardware root key, and match the image digest to the open-source build. That's confidential computing applied to the one data path that's becoming the most sensitive: your prompts.
NONCE=$(openssl rand -hex 16)
curl -s "https://api.trustedrouter.com/attestation?nonce=$NONCE" | jq .
# JWT signed by the hardware root key:
# eat_nonce your nonce (replay-protected)
# image_digest SHA-256 of the running container
# pcrs boot-time platform measurementsHardware root of trust.
GCP Confidential Space isolates the gateway from the host. Even the cloud operator can't read what's inside.
One attested production path.
The hosted gateway terminates prompt traffic only inside GCP Confidential Space. There is no non-attested fallback path.
Verify before you trust.
The nonce-bound attestation endpoint lets any client confirm the running image on demand — not just at deploy, but per request.
The overhead is gone. The excuse is gone.
GCP Confidential Space overhead is small compared with model latency. There's no longer a performance reason to run inference outside a TEE — only inertia.
TrustedRouter makes confidential inference a one-line base_url change, across 30+ providers, with the attestation exposed for you to check.
The full argument: “Attestation is All You Need”.
Attestation proves the running binary is the published binary on hardware you can challenge. It does not defeat a nation-state with physical access to the host, and it does not prove the open-source binary is bug-free. The trust anchor is the hardware and cloud attestation chain.
Current routes, prices, privacy, and measured performance.
Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.
| Model | Providers | Context | Input | Output | Privacy | Measured route |
|---|---|---|---|---|---|---|
Anthropic: Claude Opus 4.8anthropic/claude-opus-4.8 |
|
1,000,000 | $5.275/1M | $26.375/1M | varies 5 cited scores | 1947 ms TTFT anthropic · 100.00% available · n=2 |
OpenAI: GPT-5.5openai/gpt-5.5 |
|
1,050,000 | $5.275/1M | $31.65/1M | ZDR 3 cited scores | 5401 ms TTFT atlas-cloud · 38 tok/s · 100.00% available · n=1 |
Google: Gemini 3.5 Flashgoogle/gemini-3.5-flash |
+1
|
1,048,576 | $1.5825/1M | $9.495/1M | ZDR | 1564 ms TTFT google-ai-studio · 100.00% available · n=4 |
MoonshotAI: Kimi K2.7 Codemoonshotai/kimi-k2.7-code |
+10
|
262,144 | $0.745041/1M to $1.00225/1M | $3.4815/1M to $4.22/1M | ZDR 5 cited scores | 2128 ms TTFT azure · 31 tok/s · 100.00% available · n=25 |
Z.ai: GLM 5.2z-ai/glm-5.2 |
+24
|
1,048,576 | $0.7174/1M to $2.407721/1M | $1.5825/1M to $6.952295/1M | E2EE 4 cited scores | 4244 ms TTFT phala · 14 tok/s · 85.71% available · n=52 |
MiniMax: MiniMax M3minimax/minimax-m3 |
+8
|
524,288 | $0.24265/1M to $0.58025/1M | $1.0128/1M to $2.321/1M | ZDR 4 cited scores | 1629 ms TTFT minimax · 137 tok/s · 100.00% available · n=109 |
Browse every modelReview provider policiesOpen the full leaderboardSnapshot 2026-09-23T20:43:46.309Z