Compute

Du bare‑metal jusqu’au edge.

Form factors

• Bare metal — dedicated hardware in tier‑3+ datacentres, including secure enclaves (Intel SGX, AMD SEV-SNP) for confidential compute.
• VMs — KVM-based, on the same hardware tier as bare metal.
• Containers — Docker, Docker Swarm, Kubernetes (k3s, k8s).
• Serverless — Cloudflare Workers / edge runtimes for the static-site and edge-function tier.
• Accelerators — GPU (NVIDIA H100/H200/B100), TPU partnerships, FPGA via partner programmes.

Topologies

• Single-tenant dedicated — the default for federal and regulated-finance customers.
• Multi-tenant shared — for development and non-sensitive workloads at cost-efficient pricing.
• Air-gapped on-prem — we ship the platform to your facility; see /sovereign.
• Hybrid — bursting to managed capacity from an on-prem base, with cryptographic data-locality enforcement via the CEK envelope.

Locations

Standing managed regions: US-East, US-Central, US-West, EU-West, EU-Central, ME (Dubai), APAC (Singapore). On-prem deploys go anywhere you have a rack.

Confidential compute

TEE-hosted workloads (Intel SGX, AMD SEV-SNP, AWS Nitro Enclaves on partner regions) for workloads where data sensitivity requires attested execution. Composes naturally with the CEK envelope: the decrypt path can be gated to run only inside an attested enclave.