01enterprise · live
OpenRouter
enterprise tier · drop-in
“Drop-in OpenAI-compatible endpoint with verifiable, no-log routing. The receipt is the audit trail.”
18B+ tokens
no-log · verified routing
Private inferentie
Inference zonder de prompt bloot te geven.
OpenAI-compatibel. Ondertekende ontvangstbewijzen. Geen logs, by design.
je gedachten blijven van jou
Private LLM catalog
Frontier models with private runtime.
OpenAI-compatible models with hardware-backed privacy and ACI verification. Keep your SDK flow, change the endpoint, and copy the real call when you need it.
Model requests are routed through confidential AI providers with TEE support.
Check allPrivate inference, by construction.
What you say to the model stays between your client and an attested CVM. Three primitives — encryption, TEE, no-logs — make that a property of the build, not a promise.
End-to-End Encryption
- AES-GCM ciphertext on the wire, both hops
- RA-TLS terminates inside the CVM, not at a load balancer
- No plaintext intermediary on the host
Hoe het werkt
Loop stap voor stap door één request, end-to-end.
Schakel dstack uit om precies te zien welke garantie verdwijnt.
Private inference op dstack
ACI gateway attestation, signed receipts, and verified upstream model sessions
actieve edgeinactiefnieuw in stap
stap 1 of 5 · scroll-aware1
Stap 1 / 5Verifieer de build vóórdat u één byte verzendt
De client-SDK haalt de TDX-quote van elke kandidaat-CVM op en draait dcap-qvl lokaal — controleert of de build overeenkomt met een no-log entry in DstackApp.sol. De trustbeslissing gebeurt client-side; Phala wordt niet gevraagd om zichzelf te attesteren.
With dstack: De gebruiker houdt de trust root vast, verankerd in de hardware-handtekening van Intel TDX.
Zelfde SDK. Zelfde endpoints. Confidential by default.
cURL · direct inzetbaar
Hit inference.phala.com/v1/chat/completions with the OpenAI request shape. Receipt headers come back on every response — even from curl.
cURL
$ curl https://inference.phala.com \/v1/chat/completions \-H "Authorization: …" \-d '{"model":…,"provider":{"aci_verified":true}}'x-receipt-id: rcpt-e0ee..x-aci-keyset-digest: sha256:3eff..
PYTHON
from openai import OpenAIc = OpenAI(base_url="…phala.com/v1",api_key=PHALA_KEY)r = c.chat.completions.create(…)
OpenAI Python SDK
`base_url="https://inference.phala.com/v1"` and you’re done. Existing code keeps working; capture x-receipt-id from the raw response when you need proof.
Eén uniforme verifier
Every route returns the same ACI artifacts: a gateway attestation report, a signed receipt, and an attested-session reference for the serving upstream.
UNIFIED PROOF
unified verifierall match
phalaLlama 3.1
near aiDeepSeek V3
tinfoilQwen2.5
chutesMistralone format · any provider
OPENROUTER
openrouter · phala2026-09-10
34.2Btokens / day
Llama · open$0.40 / M
Llama · phala$0.40 / M
DeepSeek · open$0.27 / M
DeepSeek · phala$0.27 / M
Geen premium voor privacy
Confidential routes through Phala on OpenRouter price the same as the open route. Privacy is no longer a procurement line item — just a header you opted into.
two-hop RA-TLS · X.509 with TDX-quote extension
tunneled · no plaintext intermediary
hop 01 · client → gateway
CN=phala-gatewayTDX-quote ext (1.3.6.1.4.1…)
hop 02 · gateway → model CVM
CN=vllm-llama-3.1-70bTDX+H100 quote ext
RA-TLSmTLSX.509tunneled
RA-TLS over twee hops, helemaal tot aan het model
The first TLS hop terminates inside the dstack-gateway CVM (whose certificate carries its TDX quote). The second terminates inside the model CVM. There is no plaintext intermediary — just two confidential VMs whose X.509 certificates ARE their attestations.
response · /v1/chat/completions
200x-receipt-idrcpt-e0eefe…x-aci-identitysha256:3def…x-aci-keyset-digestsha256:3eff…sessionupstream.verified
verify receiptmatches attestation
Signed receipt + attested session, every response
Every response carries x-receipt-id. Fetch the ACI receipt, verify its signature and response hash against a fresh gateway attestation, then follow upstream.verified.session_id when you need deeper audit evidence.
in production today · 3 live partners
Confidential inference, in production.
OpenRouter routes its enterprise tier through Phala. NEAR AI ships verifiable agent inference. OODA AI runs decentralized GPU TEE.
02web3 · live
NEAR AI
verifiable agent inference
“Verifiable agent inference for autonomous, on-chain workflows. Every model call lands on-chain with proof.”
100% receipts
on-chain verified · zk inference
03public-co · live
OODA AI
NASDAQ-listed · decentralized GPUs
“Decentralized GPUs with hardware attestation guarantees. No host root, no off-band access, no policy promises.”
12M tokens / day
TDX + H100 · hardware-attested
OpenAI-compatible
drop-in /v1 surface
TDX + H100/H200/B300
CPU + GPU TEE
5–15% overhead
vs bare-metal
No host root
compose-hash IS the policy
AI-oplossingspaden
Gebruik privé-modellen waar AI met geheimen werkt.
Het endpoint voor het privé-model is het eerste toegangspunt. Hetzelfde privacy-gebouwblok breidt zich uit naar agents, datastromen en training.
Agents
Privé AI-agents
Laat agents draaien met sleutels, tools, geheugen en acties binnen een geverifieerde runtime in plaats van een zichtbare automation cloud.
Training
Privémodeltraining
Pas modellen aan op propriëtaire data terwijl datasets, gradients, checkpoints en evaluatietraces binnen de grens blijven.
private training run
Observe without exposing weights.
01
dataset
sealed
02
fine-tune
running
03
eval
private
04
checkpoint
verified
loss curve
proof attached
attestation.json
Data
Privé AI-data
Verplaats modellen naar gevoelige records en geef goedgekeurde outputs terug zonder ruwe data bloot te stellen aan de modeloperator.
source
EHR data
source
Customer records
source
Internal docs
TEE clean room
query without raw access
approved output
aggregate only
no row exportproof linked
Deploy private inference
OpenAI-compatible. Attested. Receipt-backed.
Drop in with the OpenAI SDK you already use. Point at inference.phala.com and capture x-receipt-id for the signed ACI receipt.
- 01OpenAI-compatible base URL
- 02TDX + H100 / H200 / Blackwell
- 03Signed ACI receipt per response
- 04Gateway attestation + upstream sessions
- 055–15% TEE overhead vs bare-metal
Private uitvoering. Verifieerbare resultaten.
Nieuwsbrief
© 2026 Hashforest Technology. Alle rechten voorbehouden. Privacy • Voorwaarden