Tinfoil
Explore Tinfoil models on TrustedRouter with current routes, token pricing, policy sources, privacy posture, regional availability, and API support.
Tinfoiltinfoil
These privacy labels describe Tinfoil, the upstream model provider. Confidential requires all three: verified provider compute, end-to-end encryption and explicit zero data retention. Account and billing metadata are outside the content-retention claim.
| Provider | Tinfoil |
|---|---|
| API operator country | US Legal home of the API operator, not an inference-location guarantee. |
| Headquarters | Not verified |
| Routing status | Active |
| Provider website | https://tinfoil.sh/ |
| Models | 10 public models |
| Credits routes | 10 |
| Zero data retention | yes All routes |
| Verified confidential inference | Verified |
| Policy note | Tracked as a confidential inference provider with attested provider compute and no prompt/output logging claims. Policy source |
Inference locations
Provider API declarations are also available on each model's endpoint API. Direct chat and Responses replies separate advertised availability from serving location in usage.inference_location; the actual serving region remains unknown when not reported.
Where the upstream GPUs execute the model, not the provider's headquarters, API ingress, or data storage. ZDR and confidential inference do not by themselves restrict geography.
- Declared countries or regions
- Not verified
No inference-location declaration has been verified for this provider. - Can locations change?
- Not verified. Do not assume that the serving location is fixed.
- Provider region pinning
- Not verified.
- Pinning through TrustedRouter
- No verified provider-specific location pin documented here.
- Infrastructure declaration
- Inference location not verified; no country-specific residency commitment.
- Evidence
- Not yet reviewed.
Provider selection alone is not a region pin. TrustedRouter's US provider filter selects company jurisdiction, not GPU location. A regional gateway hostname does not pin a downstream GPU. For a binding residency requirement, confirm the model, region, failover scope and enforced controls before sending sensitive data.
Measured performance
184 samplesContinuously sampled across Tinfoil's routed models: p50 TTFT, effective throughput, and success rate. Effective throughput uses provider-reported output tokens over complete request time. Unsupported route and probe-configuration rows are separated from provider downtime. No prompt or output content stored.
| p50 TTFT | 1528 ms |
|---|---|
| Effective throughput | 123 tok/s n=4 |
| Uptime | 99.46% |
| Model | p50 TTFT | Effective throughput | Uptime | Config excluded | Availability samples |
|---|---|---|---|---|---|
| z-ai/glm-5.3 | 1086 ms | 212 tok/s n=1 | 100.00% | 2 provider_error |
29 |
| google/gemma-4-31b-it | 1201 ms | 216 tok/s n=1 | 100.00% | — | 11 |
| deepseek/deepseek-v4.1-flash | 1528 ms | — | 99.07% | — | 108 |
| openai/gpt-oss-120b | 2659 ms | — | 100.00% | — | 23 |
| meta-llama/llama-3.3-70b-instruct | 1181 ms | — | 100.00% | — | 8 |
| openai/gpt-oss-safeguard-120b | 1886 ms | — | 100.00% | — | 1 |
| moonshotai/kimi-k3 | 2407 ms | 33 tok/s n=2 | 100.00% | — | 4 |
Tinfoil performance history · Full provider & model leaderboard.
Models served by Tinfoil.
Each row links to pricing, provider, benchmark, and API pages for the model.
| Model | AI IQ | Context | Input | Cached input | Output |
|---|---|---|---|---|---|
deepseek/deepseek-v4.1-flashDeepSeek: DeepSeek V4.1 Flash |
IQ 126#21 | 1,048,576 | $0.68575/1M | $0.13715/1M | $1.52975/1M |
google/gemma-4-31b-itGoogle: Gemma 4 31B |
IQ 101#110 | 262,144 | $0.422/1M | Not published | $1.055/1M |
meta-llama/llama-3.3-70b-instructMeta: Llama 3.3 70B Instruct |
— | 131,072 | $1.84625/1M | Not published | $2.90125/1M |
mistralai/voxtral-4b-tts-2603Mistral: Voxtral 4B TTS |
— | 4096 characters | $0.00211/request | Not applicable | Included |
moonshotai/kimi-k3MoonshotAI: Kimi K3 |
IQ 127#20 | 1,048,576 | $4.22/1M | $0.844/1M | $21.1/1M |
openai/gpt-oss-120bOpenAI: gpt-oss-120b |
IQ 98#126 | 131,072 | $0.15825/1M | Not published | $0.633/1M |
openai/gpt-oss-safeguard-120bGPT-OSS Safeguard 120B |
— | 131,072 | $0.15825/1M | Not published | $0.633/1M |
openai/whisper-large-v3-turboWhisper Large V3 Turbo |
— | 7 MiB, 10 minutes | $0.01055/request | Not applicable | Included |
qwen/qwen3-ttsQwen: Qwen3 TTS |
— | 4096 characters | $0.01055/request | Not applicable | Included |
z-ai/glm-5.3Z.ai: GLM 5.3 |
IQ 125#24 | 1,048,576 | $1.899/1M | $0.47475/1M | $6.06625/1M |
Questions
Does Tinfoil have zero data retention?
TrustedRouter records Tinfoil as supporting provider-level zero data retention based on the policy source linked on this page. This is a provider policy claim, separate from TrustedRouter's content-stateless real-time gateway and from end-to-end confidential compute.
Is Tinfoil end-to-end encrypted?
TrustedRouter records Tinfoil as supporting provider-side confidential compute and end-to-end encrypted inference. The route-specific model page shows whether that protection applies to a particular endpoint.
Which Tinfoil models are available through TrustedRouter?
This page currently lists 10 public Tinfoil models, with live pricing, route count, context length, measured performance when available, and links to each model's provider and benchmark pages.