NVIDIA adds bare-metal option for confidential computing

NVIDIA is expanding its confidential computing platform with Confidential Bare Metal, a deployment option for frontier model builders using dedicated third-party infrastructure. New security controls protect data in transit, measure platform integrity and enforce hardware-level access restrictions, allowing builders to operate their own software stack across cloud, neocloud and enterprise environments.

The option joins Confidential Containers for Kubernetes and Confidential Virtual Machines for virtualized environments. NVIDIA uses hardware-rooted isolation and cryptographic attestation to help protect models and data during execution, giving organizations deployment choices suited to their trust boundaries and operating requirements.

Cohere plans to integrate Confidential Bare Metal into Cohere Model Vault, extending GPU-level protection to models and data in memory and across interconnects. Google Cloud is extending support to A4X Max instances powered by NVIDIA GB300 NVL72 systems, combining non-virtualized computing with cryptographic protection for training data and model intellectual property.

Platform support is expanding across Grace Blackwell and Rubin systems. Providers including CoreWeave, Google Cloud, Microsoft Azure Infrastructure and Nebius support NVIDIA Confidential Computing deployments, while systems partners including Cisco, Dell Technologies and HPE will support the capabilities through NVIDIA-Certified Systems. NVIDIA DSX OS will support all confidential computing modes as a software foundation for cloud providers building AI factories.