Secure Computation

With Cosmian Secure Computation, data and code are encrypted with different keys and execute in a fully managed and secured environment. Only the authorized result owner can decrypt the computation results.
Just encrypt your data sets. Just write your Python code and send it encrypted.

There is no need to handle complex cryptographic key exchanges or worry about provisioning any infrastructure.

Explore our documentation on Secure Computation

Start Free

Code
encryption

Your code is encrypted before it is sent. No one can access it, not even your cloud provider sysadmin.

Data
encryption

Data always stay encrypted. You can work with sensitive data without having to worry about security or privacy.

Your preferred libraries are available

Pandas, scikit-learn, PyTorch, NumPy… all are available in your secure Python runtime.

Trigger your service
when you want

Your computation can be triggered on-demand or run periodically at fixed times, dates, or intervals.

Deploy quickly using Python

Our Python library exposes a simple API to quickly encrypt, decrypt and run.

KMS
included

Keys management is simple and can be done with a UI or a REST API.

How it works

Cosmian Secure Computation is a serverless execution environment relying on Intel Software Guard Extensions (SGX).

Set-Up & Key Exchange

Launch a secure enclave in no time and without having to trust anyone.

Neither Cosmian nor the cloud provider ever has your keys.

Sending Data and Code

Encrypt code, encrypt data, and send them inside the enclave.

Everything stays encrypted, even in use.

Run you computation

Your code is executed in a fully managed and secured environment.

The Python runtime allows you to run your code with the libraries you already use.

Receiving the Result

Once the computation is over, you can download the result.

Since this result is also encrypted, you can work in a zero-trust environment.

This technology delivers advanced hardware and RAM security encryption features, meaning your code and data are fully isolated from other applications. Processes running on the same device or server have no access to the secure partition.