What enclaive does

enclaive is a Berlin-based confidential computing cybersecurity company that enables organizations to run workloads inside hardware-based Trusted Execution Environments (TEEs) across multiple cloud providers without requiring changes to existing code, operating systems, or DevOps tooling. The platform is built on AMD SEV-SNP and Intel TDX silicon and orchestrated through eMCP, a multi-cloud control plane that connects sovereign key management, hardware-enforced runtimes, and cross-cloud attestation. On top of eMCP, the company layers Buckypaper (Confidential Virtual Machines), Dyneemes (Confidential Kubernetes), Morphism (Confidential Serverless Functions, in development), Virtual HSM, Vault (multi-cloud key and secret management), Nitride (attestation-gated workload identity), and Garnet (a confidential AI firewall that pseudonymizes inputs before they reach third-party LLMs). The company also operates managed encrypted databases (MongoDB, PostgreSQL, MariaDB, Redis) and managed confidential deployments of Nextcloud and GitLab.

enclaive generates revenue through subscription-based confidential compute platform access and managed services for encrypted databases and confidential applications, with enterprise multi-year contracts and a free console trial for self-serve evaluation. Its go-to-market is sales-led for regulated enterprise customers in finance, healthcare, government and public sector, and regulated critical sectors, supplemented by a product-led self-serve motion and channel distribution through Prianto, Adfinis, vshosting, and TDSynnex. Disclosed customers include Arbeiterwohlfahrt RTK (social services), Lufthansa Industry Solutions (industrial/technology), Lilie Ihwas Attorneys and Websiteium (legal), and GetCapital (financial services). The company was founded in 2022, is headquartered in Berlin with its legal entity enclaive GmbH registered in Hofheim am Taunus, and had approximately 20 employees as of February 2026, when it closed a €4.1 million seed round co-led by Join Capital and the Amadeus APEX Technology Fund with Auriga Cyber Ventures.

Name

enclaive

Legal name

enclaive GmbH

Website

https://enclaive.io

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

11–50 employees

Short description

enclaive is a Berlin-based confidential computing cybersecurity company providing a multi-cloud platform that runs workloads inside hardware-enforced Trusted Execution Environments, serving regulated enterprises in finance, healthcare, and government across Europe.

Ownership category

akta.pro rank

Headquarters

HQ city

Hofheim Am Taunus

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Confidential Compute Services: Subscription-based services for confidential computing infrastructure and software, including platform access, managed enclaves, and key management services. Pricing based on consumption and service tiers.
2. Managed Applications: Revenue from managed application hosting including Nextcloud and GitLab with built-in confidential computing capabilities.
3. Encrypted Database Hosting: Data-in-use encrypting database services for MongoDB, PostgreSQL, MariaDB, and Redis with transparent encryption.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels6 records

Core offering

enclaive provides a confidential computing platform that enables organizations to deploy applications and data inside hardware-enforced secure enclaves across multiple cloud providers without requiring code or operating system changes. Its core offering centers on the eMCP (enclaive Multi-Cloud Platform) which orchestrates sovereign key management, hardware-enforced runtimes, and cross-cloud attestation, supplemented by module products such as Buckypaper (Confidential VMs), Dyneemes (Confidential Kubernetes), Virtual HSM, Vault, Nitride, and Garnet (Confidential AI firewall), plus managed encrypted services for databases (MongoDB, PostgreSQL, MariaDB, Redis) and applications (Nextcloud, GitLab).

Product overview

enclaive offers a platform-plus-modules architecture centered on confidential computing, enabling organizations to deploy applications inside hardware-enforced secure enclaves across any cloud without code changes. The core platform is the eMCP (enclaive Multi-Cloud Platform), which orchestrates sovereign key management, hardware-enforced runtimes, and cross-cloud attestation. On top of eMCP, enclaive provides three layers of products: (1) Confidential Compute — Buckypaper (Confidential Virtual Machines), Dyneemes (Confidential Kubernetes), and Morphism (Confidential Serverless Functions, coming soon); (2) Virtual HSM and Key Management — Virtual HSM (hardware-level security in software), Vault (multi-cloud secret management), and Nitride (attestation-gated workload identity); and (3) Confidential AI — Garnet (pseudonymizes LLM inputs for secure generative AI). The company also offers managed encrypted database hosting for MongoDB, PostgreSQL, MariaDB, and Redis, plus managed confidential applications including Nextcloud and GitLab. All products provide 3D encryption covering data at rest, in transit, and in use.

Differentiator

Problem solved

Functional benefit

Brands

• eMCP (enclaive Multi-Cloud Platform): The core platform for orchestrating and provisioning Confidential Computing environments across different cloud providers from a single dashboard.
• Buckypaper
• Dyneemes
• Morphism
• Vault
• Nitride
• Garnet
• Virtual HSM (vHSM)

Products and services

• eMCP (enclaive Multi-Cloud Platform) Central orchestration platform for enclaive's confidential computing stack. eMCP enables deployment and management of workloads across multiple cloud providers from a single dashboard, connecting sovereign key management, hardware-enforced runtimes, and cross-cloud attestation for enterprises in regulated industries.
• Buckypaper Confidential Virtual Machines that let existing VM workloads run inside hardware-enforced enclaves with no code or operating system changes, enabling secure workload migration to the cloud for regulated enterprises.
• Dyneemes Confidential Kubernetes solution that runs every pod inside a hardware-isolated enclave while maintaining compatibility with kubectl, Helm, and existing CI/CD pipelines for cloud-native engineering teams.
• Virtual HSM (vHSM) Software-defined hardware security module that combines hardware-level trust and security with cloud-native software agility, offering full Hold Your Own Key (HYOK) support within secure enclaves for regulated enterprises.
• Vault Multi-cloud secret management solution that centralizes key control, provides key rotation and audit logging, and supports Bring Your Own Key (BYOK) across diverse cloud platforms using NIST/BSI-standardized cryptography.
• Nitride Workload identity management product that ensures only attested workloads can access specific resources and data, enforcing a no-attest, no-key policy where every workload must prove integrity before receiving credentials.
• Garnet Confidential AI firewall that enables secure interactions with multiple LLMs by pseudonymizing data using confidential servers and vector databases before inputs reach the LLM, ensuring GDPR-compliant and secure AI management for enterprises.
• Managed Encrypted Databases (MongoDB, PostgreSQL, MariaDB, Redis) Fully managed database hosting for MongoDB, PostgreSQL, MariaDB, and Redis with transparent data-in-use encryption, providing full database encryption during processing for regulated enterprises.
• Managed Confidential Nextcloud Managed deployment of Nextcloud Hub providing online collaboration functionality similar to Dropbox, Office 365, or Google Drive, with automatic encryption of all files for GDPR-compliant secure client communication.
• Managed Confidential GitLab Managed confidential deployment of GitLab for secure code development, protecting business intellectual property by keeping code development secret at all times.

Quantifiable outcome

• Time to first secure workload: <12 weeks (from Phase 1 kickoff to first Tier 1 workload secured on target)
• +3 more outcomes

Named customers5 records

Segments7 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration14 records

AI capability4 records

Feature9 records

Partnerships

16 partnerships are on record, tiered core and regional.

• PriantocoreChannel Partner/ Reseller/ DistributorDistribution partnership to expand reach of Confidential Computing solutions, helping businesses protect sensitive data during processing with cutting-edge security technology.
• AdfiniscoreImplementation/ SI/ Consulting PartnerPartnership combining modern encryption technologies with comprehensive IT lifecycle approach to strengthen security and sovereignty in cloud environments.
• vshostingregionalChannel Partner/ Reseller/ DistributorManaged Cloud Service Provider partnership focused on NIS2 compliance and secure cloud structures made in Germany.
• AWS (Amazon Web Services)coreTechnology or IntegrationTechnology integration partner. AWS is available as a deployment target on the enclaive platform.
• Microsoft AzurecoreTechnology or IntegrationTechnology integration partner. Azure is available as a deployment target on the enclaive platform.
• Google CloudcoreTechnology or IntegrationTechnology integration partner. Google Cloud is available as a deployment target on the enclaive platform.
• IntelcoreTechnology or IntegrationTechnology partner providing TDX (Trust Domain Extensions) technology for confidential computing enclaves.
• AMDcoreTechnology or IntegrationTechnology partner providing SEV-SNP (Secure Encrypted Virtualization-Secure Nested Paging) technology for confidential computing.
• Red HatcoreTechnology or IntegrationStrategic partnership for multi-tenancy, secure cloud transitioning and sovereignty with OpenShift and vHSM key management.
• SUSEcoreTechnology or IntegrationPartnership with SUSE Rancher Prime providing verifiable secrets sovereignty and granular, cloud-native security for regulated European teams.
• TDSynnexcoreChannel Partner/ Reseller/ DistributorTechnology distribution partner in the enclaive partner ecosystem.
• StackITregionalTechnology or IntegrationGerman sovereign cloud provider partnership for confidential computing deployments.
• OVH CloudregionalTechnology or IntegrationEuropean cloud provider partnership for confidential computing deployments.
• Open Telekom CloudregionalTechnology or IntegrationGerman telecom cloud provider partnership for confidential computing deployments.
• GitLabcoreTechnology or IntegrationManaged application partnership providing confidential GitLab hosting to protect business IPs during code development.
• NextcloudcoreTechnology or IntegrationManaged application partnership providing confidential Nextcloud Hub with automatic file encryption.

Scale indicators4 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Fortanix: Fortanix offers a confidential computing platform built on TEEs with key management, data security and confidential AI workloads. It is the closest direct competitor to enclaive, targeting similar regulated enterprise buyers with comparable runtime, HSM and AI offerings.
• Anjuna Security: Anjuna provides a confidential computing platform that isolates workloads inside hardware enclaves across multiple clouds. Its Confidential VMs and Kubernetes solutions overlap directly with enclaive's Buckypaper and Dyneemes.
• Edgeless Systems: Edgeless Systems is a German confidential computing startup offering Constellation and Evervault products on AMD SEV and Intel TDX. It is a direct regional peer with similar sovereign-cloud positioning in Europe.
• Opaque Systems: Opaque Systems builds a confidential computing platform for secure AI and analytics on shared data using TEE enclaves. Its confidential AI / data clean room capabilities overlap with enclaive's Garnet and managed databases.
• Decentriq: Decentriq provides confidential data clean rooms based on trusted execution environments, enabling privacy-preserving data collaboration. It overlaps with enclaive's regulated-industry data collaboration and confidential analytics use cases.

Broad incumbents

• Microsoft Azure Confidential Computing: Azure Confidential Computing offers AMD SEV-SNP and Intel TDX-based VMs, attestation and confidential containers inside the broader Azure platform. It is a broad incumbent that competes with enclaive on the underlying IaaS layer while also being an integration partner.
• AWS Nitro Enclaves: AWS Nitro Enclaves provides isolated compute environments within EC2 instances for processing sensitive data, alongside KMS and attestation services. As a broad incumbent, it covers parts of the same confidential computing surface as enclaive.
• Google Cloud Confidential VMs: Google Cloud Confidential VMs (AMD SEV, SEV-SNP) and Confidential GKE extend confidential computing across the GCP stack. It is a broad incumbent competitor to enclaive's multi-cloud confidential orchestration.

Others

• Utimaco: Utimaco is a major HSM vendor whose hardware security modules overlap with enclaive's Virtual HSM value proposition. It is an adjacent player and listed technology partner, competing at the key-management layer.
• SUSE: SUSE provides enterprise Linux, Kubernetes (Rancher) and security tooling and is both a strategic partner (Rancher Prime + vHSM) and an adjacent ecosystem participant for confidential Kubernetes workloads.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/enclaive

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds3 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about enclaive