OpenAI compatible API · Attested · Public status

Tinfoil Alternative — Verifiable Privacy, Every Provider

Same verifiable-privacy bet as Tinfoil, applied as a router. Attested, no-log gateway across 30+ providers with one API.

Verify gateway

Onebase URL to migrate

100sof models and routes

0prompt or output logs. Always.

Tinfoil alternative

Same verifiable-privacy bet. TrustedRouter routes across every provider.

Tinfoil pioneered verifiable confidential inference, and the thesis is right: attestation beats a privacy policy. TrustedRouter shares it — and applies it as a router, not a single inference endpoint.

That means you keep model choice. Route the same attested, no-log gateway to Claude, GPT, Gemini, DeepSeek, Kimi, Llama, Mistral and 20+ more, with automatic fallback, one OpenAI-compatible API, and one key.

Compare models in the playground How attestation works

One API, every providerPython

client = OpenAI(
    base_url="https://api.trustedrouter.com/v1",
    api_key="sk-tr-v1-..."
)

# Same attested gateway, any model:
for model in ["anthropic/claude-sonnet-4.6",
              "openai/gpt-5.5",
              "deepseek/deepseek-v4-flash"]:
    client.chat.completions.create(
        model=model,
        messages=[{"role": "user", "content": "hi"}],
    )

Shared thesis

Verify, don't trust.

Hardware attestation + open source. We agree with Tinfoil on the principle — privacy you can check beats privacy you're promised.

Router, not endpoint

30+ providers, one key.

Don't pick a single confidential model — route the attested gateway to the best model for each job, with fallback when one is down.

Drop-in

OpenAI-compatible.

Change one base_url and keep your existing SDK, model IDs, and code. Migrate an existing OpenRouter or OpenAI integration in minutes.

TinfoilTrustedRouter

AttestationYesYes

Open sourceYesYes

ShapeConfidential inferenceMulti-provider router

Model choiceHosted model set30+ providers, switchable per call

Provider fallbackn/aAutomatic rollover

Best fitA confidential endpoint for chosen modelsVerifiable routing across the whole model market

Same destination, wider road

Attestation should cover the whole market, not one endpoint.

The future where every prompt goes through an attested path shouldn't require giving up model choice. TrustedRouter is the bet that you can have both: verifiable privacy and the full provider market behind one API.

The argument in full: “Attestation is All You Need”.

Live catalog evidence

Current routes, prices, privacy, and measured performance.

Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.

603public models

114providers

1808configured routes

431ZDR routes

56provider E2EE routes

5640recent availability samples

Model	Providers	Context	Input	Output	Privacy	Measured route
DeepSeek: DeepSeek V4.1 Flash`deepseek/deepseek-v4.1-flash`	+21 37 routes	1,048,576	$0.01055/1M to $0.68575/1M	$0.1266/1M to $1.5825/1M	Confidential + ZDR	1073 ms TTFT wafer · 100.00% available · n=587
DeepSeek: DeepSeek V4 Flash 0731`deepseek/deepseek-v4-flash-0731`	+23 35 routes	1,048,576	$0.0422/1M to $0.495962/1M	$0.09495/1M to $1.3926/1M	Confidential + ZDR	1996 ms TTFT inceptron · 96.10% available · n=546
DeepSeek V4.1 Flash Uncensored`dealignai/deepseek-v4.1-flash-1017-uncensored`	1 routes	1,048,576	$0.68575/1M	$1.52975/1M	Confidential + ZDR	1538 ms TTFT maple · 96.79% available · n=499
DeepSeek V4.1 Flash Uncensored`deepseek/deepseek-v4-1-flash-uncensored`	2 routes	1,000,000	$0.34815/1M	$1.3926/1M	varies	1060 ms TTFT venice · 99.15% available · n=471
DeepSeek V4.1 Flash 1017 Fast`deepseek/deepseek-v4.1-flash-1017-fast`	2 routes	1,048,576	$0.633/1M	$2.532/1M	ZDR	875 ms TTFT baseten · 100.00% available · n=72
Z.ai: GLM 5.2`z-ai/glm-5.2`	+28 48 routes	1,048,576	$0.3587/1M to $2.361723/1M	$1.5825/1M to $6.819476/1M	Confidential + ZDR 4 cited scores	900 ms TTFT friendli · 188 tok/s · 100.00% available · n=71