NVIDIA Confidential Computing Expands, Enabling Frontier Model Builders to Securely Scale Across Global Infrastructure

NVIDIA Blog News
confidential-computing nvidia infrastructure ai-security gpu cloud

Summary

NVIDIA expands its Confidential Computing layer with Confidential Bare Metal, new platform security controls, and support across Grace Blackwell and Rubin systems, letting frontier model builders securely run sensitive workloads on third-party infrastructure while retaining control of their models and data.

<div id="bsf_rt_marker"></div><p><span style="font-weight: 400;">NVIDIA builds tools to enable safe agents </span><a href="https://blogs.nvidia.com/blog/ai-security-agent-stack/"><span style="font-weight: 400;">across the stack</span></a><span style="font-weight: 400;">. The NVIDIA OpenShell Reference Architecture, </span><a target="_blank" href="https://nvidianews.nvidia.com/news/openshell-reference-architecture"><span style="font-weight: 400;">announced today</span></a><span style="font-weight: 400;">, is part of NVIDIA’s growing portfolio of technologies that enables organizations to safely deploy agents at scale. </span><a target="_blank" href="https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/"><span style="font-weight: 400;">NVIDIA Confidential Computing</span></a><span style="font-weight: 400;"> is the infrastructure layer that protects the models and data those agents depend on while running.</span></p> <p><span style="font-weight: 400;">Today, NVIDIA is expanding that layer with Confidential Bare Metal, a new deployment option with NVIDIA Confidential Computing that enables frontier model builders to run sensitive workloads on dedicated third-party infrastructure while retaining control of their models and data. </span></p> <p><span style="font-weight: 400;">NVIDIA is introducing new platform security controls that protect data in transit, measure platform integrity and enforce hardware-level access restrictions. These new controls let frontier model builders use bare-metal instances to own and operate their bespoke software stack, including host and platform infrastructure software, when operating on NVIDIA accelerated computing infrastructure across third-party cloud, neocloud and enterprise infrastructure. </span></p> <div style="margin: 0 !important; padding: 0 !important; text-align: center; line-height: 1;"><a style="display: inline-flex; align-items: center; justify-content: center; margin: 0 !important; padding: 10px !important; background-color: #76b900; color: #ffffff !important; font-family: 'NVIDIA Sans', Arial, sans-serif; font-size: 16px; font-weight: bold; line-height: 1 !important; text-align: center; text-decoration: none !important; white-space: nowrap; vertical-align: top;" href="https://blogs.nvidia.com/gtc-berlin-2026-news/">Read All NVIDIA in Europe Announcements</a></div> <p>&nbsp;</p> <p><span style="font-weight: 400;">NVIDIA Confidential Computing now offers a converged security architecture with three deployment options: </span></p> <ul> <li><span style="font-weight: 400;">Confidential Bare Metal for bare-metal infrastructure</span></li> <li><span style="font-weight: 400;">Confidential Containers for Kubernetes environments</span></li> <li><span style="font-weight: 400;">Confidential Virtual Machines for virtualized environments</span></li> </ul> <p><span style="font-weight: 400;">Organizations can match the right model to their trust boundaries and operating requirements.</span></p> <p><span style="font-weight: 400;">NVIDIA Confidential Computing is also expanding across NVIDIA Grace Blackwell and Rubin systems and will integrate with NVIDIA DSX OS as a reference architecture for cloud providers building AI factories.</span></p> <h2><b>Model Builders Tap Global Capacity</b></h2> <p><span style="font-weight: 400;">Confidential Bare Metal gives supported providers a path to serve high-value workloads that require strong model and data privacy protections. For model builders, the expanding ecosystem offers more geographic, sovereign and operational options for scaling training and inference worldwide.</span></p> <p><span style="font-weight: 400;">Cohere </span><span style="font-weight: 400;">plans to integrate Confidential Bare Metal into </span><span style="font-weight: 400;">Cohere </span><span style="font-weight: 400;">Model Vault, using NVIDIA Confidential Computing trusted execution environments to extend hardware-rooted security directly to the GPU — protecting models and data in memory and across interconnects during execution.</span></p> <p><span style="font-weight: 400;">“Enterprises trust Cohere to provide a secure and confidential platform for inference,” said</span><span style="font-weight: 400;"> Phil Blunsom, chief technology officer at Cohere.</span><span style="font-weight: 400;"> “With NVIDIA Confidential Computing in Cohere Model Vault, we’re extending hardware-rooted security directly to the GPU, protecting customer data in memory and across interconnects during execution.”</span></p> <p><span style="font-weight: 400;">Google Cloud</span><span style="font-weight: 400;"> is extending support for  Confidential Bare Metal to A4X Max instances powered by NVIDIA GB300 NVL72 systems. These will combine non-virtualized NVIDIA accelerated computing with cryptographic protection for training data and model intellectual property.</span><span style="font-weight: 400;"><br /> </span></p> <p><span style="font-weight: 400;">“Google Cloud introduces Confidential Bare Metal to provide AI labs with hardware-isolated, non-virtualized compute environments and end-to-end cryptographic protection. Our A4X instances, built using NVIDIA Confidential Computing, preserve the privacy of user data, protect model IP, provide top-line serving performance,&#8221; said</span><span style="font-weight: 400;"> Andrés Lagar-Cavilla, distinguished engineer and AI infrastructure security lead at Google Cloud.</span></p> <h2><b>Confidential Computing Expands Across the NVIDIA Platform</b></h2> <p><span style="font-weight: 400;">NVIDIA Confidential Computing uses hardware-rooted isolation and cryptographic attestation to help protect models and data during execution.</span></p> <p><span style="font-weight: 400;">Support now extends to NVIDIA Grace Blackwell NVL72 — bringing Confidential Computing to NVL72 rack-scale systems — as well as x86-based NVIDIA HGX Rubin NVL8 and NVIDIA DGX Rubin NVL8 systems.</span></p> <p><a target="_blank" href="https://www.coreweave.com/blog/coreweave-zero-trust-ai-framework-your-model-your-data-your-trust"><span style="font-weight: 400;">CoreWeave</span></a><span style="font-weight: 400;">, </span><span style="font-weight: 400;">Firmus</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">GMI Cloud</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">Google Cloud</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">IREN</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">Lambda</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">Microsoft Azure Infrastructure,</span> <span style="font-weight: 400;">Nebius</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">Nscale</span><span style="font-weight: 400;"> and </span><span style="font-weight: 400;">Vultr</span><span style="font-weight: 400;"> support NVIDIA Confidential Computing deployments. Global systems partners including </span><span style="font-weight: 400;">Cisco</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">Dell Technologies</span><span style="font-weight: 400;">, </span><span style="font-weight: 400;">HPE</span><span style="font-weight: 400;">,</span><span style="font-weight: 400;"> Lenovo,</span> <span style="font-weight: 400;">Supermicro</span><span style="font-weight: 400;"> and </span><span style="font-weight: 400;">Bull </span><span style="font-weight: 400;">will support these capabilities with </span><a target="_blank" href="https://www.nvidia.com/en-us/data-center/products/certified-systems/"><span style="font-weight: 400;">NVIDIA-Certified Systems</span></a><span style="font-weight: 400;">.</span></p> <p><span style="font-weight: 400;">NVIDIA DSX OS will support all NVIDIA Confidential Computing modes, giving cloud providers a software foundation for building and operating AI factories that support confidential workloads.</span></p> <p><i><span style="font-weight: 400;">Learn more about </span></i><a target="_blank" href="https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/"><i><span style="font-weight: 400;">NVIDIA Confidential Computing</span></i></a><i><span style="font-weight: 400;">.</span></i></p> <div style="margin: 0 !important; padding: 0 !important; text-align: center; line-height: 1;"><a style="display: inline-flex; align-items: center; justify-content: center; margin: 0 !important; padding: 10px !important; background-color: #76b900; color: #ffffff !important; font-family: 'NVIDIA Sans', Arial, sans-serif; font-size: 16px; font-weight: bold; line-height: 1 !important; text-align: center; text-decoration: none !important; white-space: nowrap; vertical-align: top;" href="https://blogs.nvidia.com/gtc-berlin-2026-news/">Read All NVIDIA in Europe Announcements</a></div> <p>&nbsp;</p>
Original Article
View Cached Full Text

Cached at: 10/21/26, 12:21 PM

# NVIDIA Confidential Computing Expands, Enabling Frontier Model Builders to Securely Scale Across Global Infrastructure Source: [https://blogs.nvidia.com/blog/confidential-computing-model-builders-infrastructure/](https://blogs.nvidia.com/blog/confidential-computing-model-builders-infrastructure/) NVIDIA builds tools to enable safe agents[across the stack](https://blogs.nvidia.com/blog/ai-security-agent-stack/)\. The NVIDIA OpenShell Reference Architecture,[announced today](https://nvidianews.nvidia.com/news/openshell-reference-architecture), is part of NVIDIA’s growing portfolio of technologies that enables organizations to safely deploy agents at scale\.[NVIDIA Confidential Computing](https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/)is the infrastructure layer that protects the models and data those agents depend on while running\. Today, NVIDIA is expanding that layer with Confidential Bare Metal, a new deployment option with NVIDIA Confidential Computing that enables frontier model builders to run sensitive workloads on dedicated third\-party infrastructure while retaining control of their models and data\. NVIDIA is introducing new platform security controls that protect data in transit, measure platform integrity and enforce hardware\-level access restrictions\. These new controls let frontier model builders use bare\-metal instances to own and operate their bespoke software stack, including host and platform infrastructure software, when operating on NVIDIA accelerated computing infrastructure across third\-party cloud, neocloud and enterprise infrastructure\. NVIDIA Confidential Computing now offers a converged security architecture with three deployment options: - Confidential Bare Metal for bare\-metal infrastructure - Confidential Containers for Kubernetes environments - Confidential Virtual Machines for virtualized environments Organizations can match the right model to their trust boundaries and operating requirements\. NVIDIA Confidential Computing is also expanding across NVIDIA Grace Blackwell and Rubin systems and will integrate with NVIDIA DSX OS as a reference architecture for cloud providers building AI factories\. ## **Model Builders Tap Global Capacity** Confidential Bare Metal gives supported providers a path to serve high\-value workloads that require strong model and data privacy protections\. For model builders, the expanding ecosystem offers more geographic, sovereign and operational options for scaling training and inference worldwide\. Cohereplans to integrate Confidential Bare Metal intoCohereModel Vault, using NVIDIA Confidential Computing trusted execution environments to extend hardware\-rooted security directly to the GPU — protecting models and data in memory and across interconnects during execution\. “Enterprises trust Cohere to provide a secure and confidential platform for inference,” saidPhil Blunsom, chief technology officer at Cohere\.“With NVIDIA Confidential Computing in Cohere Model Vault, we’re extending hardware\-rooted security directly to the GPU, protecting customer data in memory and across interconnects during execution\.” Google Cloudis extending support for Confidential Bare Metal to A4X Max instances powered by NVIDIA GB300 NVL72 systems\. These will combine non\-virtualized NVIDIA accelerated computing with cryptographic protection for training data and model intellectual property\. “Google Cloud introduces Confidential Bare Metal to provide AI labs with hardware\-isolated, non\-virtualized compute environments and end\-to\-end cryptographic protection\. Our A4X instances, built using NVIDIA Confidential Computing, preserve the privacy of user data, protect model IP, provide top\-line serving performance,” saidAndrés Lagar\-Cavilla, distinguished engineer and AI infrastructure security lead at Google Cloud\. NVIDIA Confidential Computing uses hardware\-rooted isolation and cryptographic attestation to help protect models and data during execution\. Support now extends to NVIDIA Grace Blackwell NVL72 — bringing Confidential Computing to NVL72 rack\-scale systems — as well as x86\-based NVIDIA HGX Rubin NVL8 and NVIDIA DGX Rubin NVL8 systems\. [CoreWeave](https://www.coreweave.com/blog/coreweave-zero-trust-ai-framework-your-model-your-data-your-trust),Firmus,GMI Cloud,Google Cloud,IREN,Lambda,Microsoft Azure Infrastructure,Nebius,NscaleandVultrsupport NVIDIA Confidential Computing deployments\. Global systems partners includingCisco,Dell Technologies,HPE,Lenovo,SupermicroandBullwill support these capabilities with[NVIDIA\-Certified Systems](https://www.nvidia.com/en-us/data-center/products/certified-systems/)\. NVIDIA DSX OS will support all NVIDIA Confidential Computing modes, giving cloud providers a software foundation for building and operating AI factories that support confidential workloads\. *Learn more about*[*NVIDIA Confidential Computing*](https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/)*\.*

Similar Articles

NVIDIA Open Models Advance Europe’s Sovereign Intelligence Across Industries

NVIDIA Blog

NVIDIA announced an expanded family of open models across language, robotics, biology and quantum computing—including Nemotron 3.5 Super VL/Bolt, Nemotron Retriever, Kumo, Cosmos 3.5, Alpamayo 2 Edge, BioNeMo and Ising—to help European organizations build sovereign, locally customized AI applications.