How it works
Leveraging cryptography and trusted execution environments to power our decentralised and cloud-native ecosystem.
Privacy by design
Data is always encrypted at rest, in transit, and even during processing
Data is processed inside secure hardware, no human ever has access to the data
Leverages the latest privacy techniques to prevent information leakage
Next-gen technology
Decentralised and cloud native, built for ecosystems
Secure connection protocol uses the latest cryptography and provides effortless web interfaces
More flexible and orders of magnitude faster than homomorphic cryptography
Confidential computing
Confidential Computing protects data during processing by performing computation in a hardware-based Trusted Execution Environment (TEE).
TEE programs are called enclaves. They prevent unauthorised access or modification of applications and data while in use.
Intel SGX comes with remote attestations that provide verification for three things:
the application's identityits integrity (that it has not been tampered with)that it is running securely within an enclave on an Intel SGX enabled machineTamper-proof ledger
If a person, or a rogue program, attempts to tamper with the underlying ledgers, it would be spotted as fraudulent.
If a required piece of information has been tampered with, the system would not reply rather than provide an inaccurate response.
Ledgers fully encrypted by default.Protects data from indiscretion from anyone with direct access.Merkle tree protection.
Secure connection protocol
The Secretarium Connection Protocol uses multi-layered TLS to guarantee a secure and inspection-resistant connection to the TEE while providing integration flexibility with routing infrastructures.
Cryptographic evidence is provided at every stage of remote processing, enabling a fully trustworthy service.
This allows organisations that manage sensitive and regulated data to increase their security assurances.
Building on the Secretarium secure cloud
Now, you can build game-changing cloud services off the shelf. The platform makes it simple to deploy trustworthy, privacy-preserving apps powered by tamper-proof technology.
Easy to useThe Secretarium SDK allows simple creation of confidential computing apps by wrapping cryptographic complexity.
TrustworthyRemotely attestable with out-of-the-box cryptographic evidence of integrity.
Privacy-preservingData is encrypted in memory during processing. It is not even visible to cloud engineers.
Environmentally friendlySecretarium only uses low energy machines which, when possible, are hosted at Swisscom's hydroelectricity-powered datacentres.
Trusted processing via smart contract business logic
In the Secretarium environment, a smart contract is business logic that runs inside an Intel SGX enclave.
They have their own ledgers and encryption keys. The platform also provides a mechanism for updates.
Unique - Each smart contract, and each enclave, has a unique thumbprint and is remotely verifiable.
Packaged - Creating and testing smart contracts is easy, with all the encryption complexity nicely wrapped in APIs.
Code is law - The output of a smart contract can be trusted because the computation can't be tampered with.
Business process automation - Smart contracts contain business logic and are the perfect solution for trusted automation.