Confidential AI
Explore Confidential AI models on TrustedRouter with current routes, token pricing, policy sources, privacy posture, regional availability, and API support.
Confidential AIconfidential-ai
These privacy labels describe Confidential AI, the upstream model provider. Confidential requires all three: verified provider compute, end-to-end encryption and explicit zero data retention. Account and billing metadata are outside the content-retention claim.
| Provider | Confidential AI |
|---|---|
| API operator country | US Legal home of the API operator, not an inference-location guarantee. |
| Headquarters | Not verified |
| Routing status | Active |
| Provider website | https://confidential.ai/ |
| Models | 1 public model |
| Credits routes | 1 |
| Zero data retention | yes All routes |
| Verified confidential inference | Not verified |
| Policy note | Confidential AI (Inexorable, Inc.) publishes zero prompt/completion retention and no training on customer data. Operational and billing metadata are retained. Inference is served in the US and El Salvador. Its public attestation covers launch/admission, not verified GPU state. TrustedRouter uses its HTTPS API; these routes are ZDR, not verified end-to-end confidential inference and are excluded from the e2e filter. Policy source |
Inference locations
Provider API declarations are also available on each model's endpoint API. Direct chat and Responses replies separate advertised availability from serving location in usage.inference_location; the actual serving region remains unknown when not reported.
Where the upstream GPUs execute the model, not the provider's headquarters, API ingress, or data storage. ZDR and confidential inference do not by themselves restrict geography.
- Declared countries or regions
- Not verified
No inference-location declaration has been verified for this provider. - Can locations change?
- Not verified. Do not assume that the serving location is fixed.
- Provider region pinning
- Not verified.
- Pinning through TrustedRouter
- No verified provider-specific location pin documented here.
- Infrastructure declaration
- Inference location not verified; no country-specific residency commitment.
- Evidence
- Not yet reviewed.
Provider selection alone is not a region pin. TrustedRouter's US provider filter selects company jurisdiction, not GPU location. A regional gateway hostname does not pin a downstream GPU. For a binding residency requirement, confirm the model, region, failover scope and enforced controls before sending sensitive data.
Measured performance
27 samplesContinuously sampled across Confidential AI's routed models: p50 TTFT, effective throughput, and success rate. Effective throughput uses provider-reported output tokens over complete request time. Unsupported route and probe-configuration rows are separated from provider downtime. No prompt or output content stored.
| p50 TTFT | 1687 ms |
|---|---|
| Effective throughput | 134 tok/s n=2 |
| Uptime | 100.00% |
| Model | p50 TTFT | Effective throughput | Uptime | Config excluded | Availability samples |
|---|---|---|---|---|---|
| deepseek/deepseek-v4-flash-0731 | 1687 ms | 134 tok/s n=2 | 100.00% | — | 27 |
Confidential AI performance history · Full provider & model leaderboard.
Models served by Confidential AI.
Each row links to pricing, provider, benchmark, and API pages for the model.
| Model | AI IQ | Context | Input | Cached input | Output |
|---|---|---|---|---|---|
deepseek/deepseek-v4-flash-0731DeepSeek: DeepSeek V4 Flash 0731 |
— | 1,048,576 | $0.211/1M | $0.01899/1M | $0.422/1M |
Questions
Does Confidential AI have zero data retention?
TrustedRouter records Confidential AI as supporting provider-level zero data retention based on the policy source linked on this page. This is a provider policy claim, separate from TrustedRouter's content-stateless real-time gateway and from end-to-end confidential compute.
Is Confidential AI end-to-end encrypted?
TrustedRouter does not currently mark Confidential AI as end-to-end encrypted at the provider boundary. The TrustedRouter gateway is still attested, but the selected provider normally receives the request in order to run the model. Use trustedrouter/e2e for the stronger route requirement.
Which Confidential AI models are available through TrustedRouter?
This page currently lists 1 public Confidential AI model, with live pricing, route count, context length, measured performance when available, and links to each model's provider and benchmark pages.