The Solana Foundation, in coordination with the Nito team, has launched Solana Confidential Compute, an open-source software development kit and on-chain verification program designed to protect sensitive data during artificial intelligence processing. Now available in beta on the Solana devnet, the infrastructure allows developers, applications, and users to independently verify that AI computations are executed inside secure, isolated hardware environments without exposing private inputs on the blockchain.
As AI systems increasingly rely on sensitive context – such as personal conversations, proprietary code, internal documents, and trading strategies – developers face the dual challenge of shielding data during computation and proving the integrity of the underlying infrastructure. Solana Confidential Compute addresses this by utilizing trusted execution environments, or TEEs, which isolate code and data from host operating systems and operators. While the heavy AI computation occurs off-chain inside a confidential virtual machine, the hardware generates a signed cryptographic attestation binding its signing key to a recent Solana slot. Solana’s on-chain program verifies this report and publishes a public record containing the key, hardware type, and expiration date.
When the isolated machine generates an AI response, it signs the output with its hardware-bound key, enabling recipients or smart contracts to verify the signature against the public Solana ledger. Nito, whose team includes engineers formerly from Switchboard, is already deploying this framework to power Solana Confidential Chat, an encrypted platform running open-weight models where relays cannot read user prompts or responses.
Beyond private chat, the tool unlocks verifiable AI applications across the Solana ecosystem, including autonomous trading agents, automated governance, and AI judges for insurance claims or prediction markets. Currently supporting Intel TDX and AMD SEV-SNP attestations – with NVIDIA GPU support in progress – the unaudited beta is intended for development ahead of a forthcoming mainnet release.
