English
VAST Data has unveiled VAST DataEnclave, a confidential AI feature for its enterprise data platform, built on NVIDIA Confidential Computing technology. The solution enables enterprises to run proprietary and open AI models against internal data within fully customer-governed environments, including on-premises facilities, sovereign clouds, and complete air-gapped sites. It combines hardware-isolated execution with cryptographic attestation to process model parameters and sensitive regulated datasets, while retaining all key material within independent trust domains and blocking access from infrastructure operators and administrators.
Cryptographic Attestation and In-Memory Security
VAST DataEnclave supports third-generation NVIDIA Confidential Computing across Hopper, Blackwell, and next-generation GPU architectures. It creates hardware-separated execution spaces for confidential virtual machines and containers, with end-to-end encryption for system memory, GPU memory, and inter-GPU NVLink communications. Active data pipelines and AI models are fully isolated from host admins, infrastructure staff, and other multi-tenant workloads running on the same hardware.
The platform adopts a verify-before-decrypt attestation mechanism, which cryptographically validates the trusted execution environment and NVIDIA GPU hardware before releasing decryption keys. This design eliminates plaintext exposure of model weights and raw data until the enclave confirms system integrity and policy compliance. Integrated Bring Your Own Key (KMS) capabilities separate customer data keys and vendor model credentials into fully independent trust domains.
Sovereign Deployment, Auditing, and AI Agent Isolation
DataEnclave supports both network-connected infrastructure and fully air-gapped data center deployments. It leverages open CNCF Trustee-based attestation tools, alongside Fortanix Confidential AI infrastructure via strategic partnerships to deliver fully sovereign AI operations. All attestation activities, key authorization events, and enclave lifecycle operations are recorded in tamper-proof, queryable audit logs hosted on VAST DataBase.
Leveraging the same secure DataEngine runtime, VAST AgentEngine delivers isolated execution sandboxes for intelligent AI agents, enforcing granular access policies for data resources, backend systems, authorized tools, and operational behaviors.
VAST Data launched the DataEnclave preview alongside a broad partner ecosystem, including model developers Cohere, CrowdStrike, Deepgram, Factory, Fundamental, and TwelveLabs; AI cloud service providers BUZZ HPC, Nscale, and Sharon AI; and hardware vendors Cisco and Supermicro, together with technology collaborators Fortanix and NVIDIA. This release follows shortly after VAST’s CrowdStrike integration launch, expanding CrowdStrike’s role as a core model-building partner for the confidential AI program. DataEnclave is set for official release in Q1 2027, available through VAST Data and authorized OEM partners including Cisco and Supermicro.
Beijing Qianxing Jietong Technology Co., Ltd.
Sandy Yang/Global Strategy Director
WhatsApp / WeChat: +86 13426366826
Email: yangyd@qianxingdata.com
Website: www.qianxingdata.com/www.storagesserver.com
Business Focus:
ICT Product Distribution/System Integration & Services/Infrastructure Solutions
With 20+ years of IT distribution experience, we partner with leading global brands to deliver reliable products and professional services.
“Using Technology to Build an Intelligent World”Your Trusted ICT Product Service Provider!
Sandy Yang/Global Strategy Director
WhatsApp / WeChat: +86 13426366826
Email: yangyd@qianxingdata.com
Website: www.qianxingdata.com/www.storagesserver.com
Business Focus:
ICT Product Distribution/System Integration & Services/Infrastructure Solutions
With 20+ years of IT distribution experience, we partner with leading global brands to deliver reliable products and professional services.
“Using Technology to Build an Intelligent World”Your Trusted ICT Product Service Provider!