What Confidential Computing Consortium does

The Confidential Computing Consortium (CCC) is a non-profit industry consortium organized under The Linux Foundation, announced in August 2019 to advance and standardize Trusted Execution Environment (TEE) technologies that protect data while it is being processed in memory — closing the residual data-in-use gap left by storage and network encryption. Its membership spans 40+ organizations covering all major hardware architectures (Intel TDX/SGX, AMD SEV-SNP, Arm TrustZone/CCA, RISC-V) and the leading cloud and enterprise software providers, including founding members Alibaba, Arm, Baidu, Google Cloud, IBM, Intel, Microsoft, Red Hat, Swisscom, and Tencent, with newer additions such as NVIDIA, TikTok, Samsung, SUSE, and VMware (Broadcom). The CCC's technology footprint is delivered as 14 open-source projects rather than commercial products, headlined by Enarx (hardware-independent TEE abstraction), Gramine (library OS for running unmodified applications inside SGX), Open Enclave SDK (cross-architecture enclave framework), the Certifier Framework for policy-based attestation, and Veraison for attestation verification, with supporting projects covering ARM-on-device TEEs, RISC-V enclaves, attestation-I/O protocols, secure VM service modules, and multi-party confidential compute.

The consortium is funded through recurring organizational membership dues across Premier and General tiers, with all primary outputs — SDKs, frameworks, specifications, white papers, and references — distributed without license fees via GitHub, working-group mailing lists, and the confidentialcomputing.io site. Its go-to-market is community-led and event-driven, relying on the annual Confidential Computing Summit, the Open Confidential Computing Conference (OC3), co-located events at Open Source Summit, KubeCon, FOSDEM, DEF CON, and Black Hat, plus formal engagement with regulators (NIST, EU AI Act, UK DSIT, Sweden IMY, India DPDP). Target verticals are Banking & Finance, Healthcare & Life Sciences, AdTech & Media, and Public Sector & Government, where common use cases include collaborative fraud detection, cross-institution AI model training on shared data, HIPAA/GDPR-defensible analytics, post-cookie audience matching, and sovereign AI workloads for national security data. Mike Bursell serves as the first Executive Director, supported by a Technical Community Architect and a Technical Advisory Council overseeing Special Interest Groups on Attestation, GRC, Linux Kernel integration, Trusted Workload Identity, and Regulatory & Standards.

Name

Confidential Computing Consortium

Legal name

Confidential Computing Consortium

Website

https://confidentialcomputing.io

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

The Confidential Computing Consortium is a Linux Foundation non-profit consortium that advances Trusted Execution Environment standards via 14 open-source projects, serving 40+ hardware, cloud, and software members across banking, healthcare, public sector, and AdTech.

Ownership category

akta.pro rank

Product category

Confidential Computing Open Source Frameworks

NAICS

Software Publishers (5132), Computer Systems Design and Related Services (5415), Other Computer Related Services (541519)

SIC

Services-Computer Integrated Systems Design (7373), Services-Prepackaged Software (7372)

akta.pro primary industry

Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)

akta.pro secondary industries

Secure Elements & Trusted Execution Processors (TPM/TEE/Crypto MCUs) (HDAHAJAK), Security & Trusted Hardware ICs (Secure Element/TPM/Crypto) (HDAHABAF), Software Supply Chain & Dependency Security (SBOM, Signing) (HDADACAD)

Keywords

• Confidential computing
• Trusted execution environments
• Hardware enclave security
• TEE attestation frameworks
• Secure multi-party computation

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Membership Dues: The Confidential Computing Consortium is funded through membership dues from its 40+ member organizations. The consortium offers premier and general membership tiers to organizations including hardware vendors, cloud providers, ISVs, and startups.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels9 records

Core offering

The Confidential Computing Consortium advances and standardizes Confidential Computing technology through 14 open-source projects and frameworks that enable hardware-isolated execution of data in use. Its core offerings include Enarx (TEE platform abstraction), Gramine (library OS for unmodified applications in SGX), Open Enclave SDK (cross-architecture development framework), Certifier Framework (policy-based attestation), and Veraison (attestation verification services), supporting deployment across Intel, AMD, ARM, and RISC-V architectures.

Product overview

The Confidential Computing Consortium (CCC) is an industry consortium under the Linux Foundation dedicated to advancing and standardizing Confidential Computing technology. Rather than a single commercial product, the CCC maintains a portfolio of 14 open-source projects and frameworks that collectively provide the tools and specifications needed to build, deploy, and manage applications in Trusted Execution Environments (TEEs). The core offerings include Enarx (a platform abstraction layer providing hardware independence for TEEs), Gramine (a library OS compatibility layer enabling unmodified applications to run in SGX enclaves), and Open Enclave SDK (a single unified framework for cross-architecture TEE development). Supporting projects include the Certifier Framework for policy-based attestation, Veraison for attestation verification services, COCONUT-SVSM for secure VM modules, dstack for container deployment into TEEs, Islet for ARM mobile device confidential computing, Keystone for RISC-V TEEs, ManaTEE for multi-party data collaboration, Occlum for simplified enclave execution, SPDM Tools for TEE-I/O protocols, and Veracruz for privacy-preserving multi-party computation. The CCC also facilitates standards development through multiple Special Interest Groups covering attestation, GRC, Linux kernel integration, and workload identity.

Differentiator

Problem solved

Functional benefit

Products and services

• Enarx Provides a platform abstraction for Trusted Execution Environments (TEEs) enabling the creation and running of private, fungible, serverless applications with hardware independence across different TEE architectures.
• Gramine A library OS that enables unmodified applications to run inside Trusted Execution Environments, particularly Intel SGX, with added security benefits. Serves as a compatibility layer across multiple TEE platforms.
• Open Enclave SDK An open-source framework allowing developers to build Trusted Execution Environment (TEE) applications using a single enclaving abstraction that works across multiple TEE architectures.
• COCONUT-SVSM An implementation of a Secure VM Service Module for confidential computing virtual machines (CVMs), creating a secure layer under the operating system to provide trusted capabilities like virtual TPMs.
• dstack A developer-friendly and security-first SDK that simplifies the deployment of arbitrary containerized applications into Trusted Execution Environments.
• Certifier Framework for Confidential Computing Consists of a client API (Certifier API) and server-based policy evaluation server (Certifier Service) for specifying and enforcing trust policies to secure workloads across on-premises and third-party infrastructure.
• Islet An open-source software project written in Rust that enables confidential computing on ARM architecture devices using ARMv9 CCA, enabling on-device confidential computing and protecting user privacy on end user devices.
• Keystone An open-source project for building trusted execution environments (TEE) with secure hardware enclaves based on the RISC-V architecture, providing accessible secure open-source hardware enclaves for industry and academia.
• ManaTEE An open-source project for easily building and deploying data collaboration frameworks to the cloud using Trusted Execution Environments (TEEs), enabling users to collaborate on private datasets without privacy leakage.
• Occlum Makes running applications inside enclaves easy by allowing unmodified programs to run inside enclaves with just a few simple commands, open-source and free to use.
• SPDM Tools Provides a Rust language implementation of SPDM, IDE_KM and TDISP protocols used to facilitate direct device assignment for Trusted Execution Environment I/O (TEE-I/O) in Confidential Computing.
• Veracruz A research project exploring the design of privacy-preserving distributed systems using strong isolation technology and remote attestation protocols to establish neutral ground for multi-party computation between mistrusting principals.
• Veraison Builds software components that can be used to construct an Attestation Verification Service, enabling verification of trust in confidential computing environments.
• VirTEE An open community dedicated to developing open source tools for the bring-up, attestation, and management of Trusted Execution Environments.

Quantifiable outcome

• 88% of organizations report improved data integrity with Confidential Computing adoption
• +4 more outcomes

Segments4 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature8 records

Partnerships

28 partnerships are on record, tiered core, minor and general.

• NVIDIAcoreStrategic or Co-development Partner · 25 June 2026Key industry player collaborating through CCC to develop standards for attestation and identity systems for AI agent security. NVIDIA Rubin features rack-scale encryption signaling enterprise AI security focus.
• Sweden's Data Protection Authority (IMY)coreStrategic or Co-development Partner · 25 May 2026Sweden's national data protection authority published landmark GDPR guidance on TEEs through innovation sandbox program, working with Volvo Group, Ericsson, and CanaryBit. First European regulatory assessment of TEEs grounded in real deployment scenario.
• Volvo GroupcoreStrategic or Co-development Partner · 25 May 2026Participant in IMY innovation sandbox project that produced landmark GDPR guidance on TEEs. Use case centered on vehicle telemetry and data sovereignty for connected vehicles.
• EricssoncoreStrategic or Co-development Partner · 25 May 2026Participant in IMY innovation sandbox project for GDPR guidance on TEEs, exploring data sovereignty requirements for connected vehicles.
• CanaryBitcoreStrategic or Co-development Partner · 25 May 2026CCC member and participant in IMY innovation sandbox project that produced the GDPR guidance on TEEs. Contributed to landmark regulatory assessment.
• ModelyominorStrategic or Co-development Partner · 13 February 2026Start-up member building confidential computing platform for government and regulated industries using OpenStack with Intel SGX and Intel TDX.
• InvaryminorStrategic or Co-development Partner · 6 February 2026General member focused on continuous Runtime Integrity attestation enabling organizations to verify systems remain in trusted state throughout execution.
• Confident SecurityminorStrategic or Co-development Partner · 14 November 2025Start-up member dedicated to making AI truly private, developing technologies and practices that protect data and models in use.
• AcompanygeneralStrategic or Co-development Partner · 28 October 2025General member providing Confidential Computing as strategic security foundation for secure data collaboration and trusted AI. Supports data clean rooms and optimized manufacturing.
• FuriosaAIminorStrategic or Co-development Partner · 14 October 2025Startup member and semiconductor company pioneering new type of AI chip for data centers with full hardware and software stack.
• PhalageneralStrategic or Co-development Partner · 2 October 2025General member providing secure cloud platform enabling developers to run AI workloads inside hardware-protected TEEs.
• QLADminorStrategic or Co-development Partner · 21 August 2025Kubernetes-native confidential computing platform providing runtime protection with pod-level TEEs and encrypted Armored Containers for IP protection and post-quantum resilience.
• TinfoilminorStrategic or Co-development Partner · 21 July 2025Startup member with open source platform delivering cryptographically verifiable privacy for AI workloads using confidential computing including NVIDIA technology.
• TikTokcoreStrategic or Co-development Partner · 19 March 2024Joined as Premier member in 2024, elevating its role in the consortium to advance confidential computing adoption.
• Samsung ElectronicscoreStrategic or Co-development Partner · 1 January 2023Joined as member in 2023, contributing to the Certifier Framework project alongside VMware, AMD, and RISC-V community for cross-platform confidential computing development.
• VMware (Broadcom)coreStrategic or Co-development Partner · 1 January 2023Joined AMD, Samsung, and RISC-V community to work on Certifier Framework for Confidential Computing, bringing open source cross-platform framework for TEE application development.
• AMDcoreStrategic or Co-development Partner · 1 January 2023Partner in Certifier Framework project with AMD SEV-SNP technology. AMD VP highlighted importance of working with industry players for confidential computing adoption.
• SUSEgeneralStrategic or Co-development Partner · 1 January 2023Joined as member in 2023. SUSE Linux Enterprise 15 SP5 was first distro to offer full support for confidential computing supporting AMD SEV-SNP and Intel TDX.
• AlibabacoreStrategic or Co-development Partner · 21 August 2019Founding member of the Confidential Computing Consortium. Alibaba launched Alibaba Encrypted Computing technology powered by Intel SGX in 2017 and has provided commercial cloud servers with SGX capability since 2018.
• ArmcoreStrategic or Co-development Partner · 21 August 2019Founding member contributing to the charter development and Open Enclave SDK collaboration. Arm's vision requires complete edge-to-cloud security for protecting data across connected devices.
• BaiducoreStrategic or Co-development Partner · 21 August 2019Founding member supporting the formation of technical standards for confidential computing across cloud computing, blockchain and security.
• Google CloudcoreStrategic or Co-development Partner · 21 August 2019Founding member. Google's Asylo project and OpenEnclave SDK contributed to the ecosystem for protecting workloads with confidential computing.
• IBMcoreStrategic or Co-development Partner · 21 August 2019Founding member with history of leadership in secure computing. IBM Cloud and Systems clients are interested in Trusted Execution Environments combined with Enarx and Open Enclave SDK.
• IntelcoreStrategic or Co-development Partner · 21 August 2019Founding member and key technology provider with Intel SGX technology. Intel contributed the Intel SGX SDK and is critical to accelerating confidential computing practices.
• MicrosoftcoreStrategic or Co-development Partner · 21 August 2019Founding member that contributed the Open Enclave SDK to the consortium. Azure Confidential Computing relies on Microsoft expertise in confidential computing technology.
• Red HatcoreStrategic or Co-development Partner · 21 August 2019Founding member contributing the Enarx project to provide hardware independence for securing applications using TEEs.
• SwisscomcoreStrategic or Co-development Partner · 21 August 2019Founding member and leading telecom/ICT provider in Switzerland adhering to highest security standards for cloud applications and critical IoT.
• TencentcoreStrategic or Co-development Partner · 21 August 2019Founding member providing cloud security expertise. Tencent views confidential computing as a future basic capability for cloud providers.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Eclipse Foundation: Independent open-source foundation hosting working groups, specifications, and projects. Comparable in operating model and governance (membership dues, vendor-neutral IP) to CCC.
• RISC-V International: Open hardware consortium standardizing the RISC-V ISA, including confidential computing extensions (Keystone). Comparable as an open, member-funded standards body driving neutral hardware architecture adopted by CCC members.
• Trusted Computing Group (TCG): Industry standards body that defined TPM and related hardware-rooted-trust specifications. Closely comparable as a multi-vendor consortium defining hardware security specifications that underpin the TEE ecosystem CCC builds on.
• Apache Software Foundation: Vendor-neutral foundation stewarding open-source projects with a meritocratic governance model. Comparable to CCC in mission (community-driven open-source stewardship) and similar in scale of contributors and projects.
• OpenSSF (Open Source Security Foundation): Linux Foundation-hosted open-source security consortium addressing supply chain, SBOM, and SLSA. Highly comparable as a peer Linux Foundation security community with overlapping membership (Microsoft, Google, Intel) and similar working-group model.
• Cloud Native Computing Foundation (CNCF): Sister Linux Foundation project that hosts cloud-native infrastructure projects. Comparable as a Linux Foundation technical consortium advancing open-source runtime and orchestration standards used by the same hyperscaler members as CCC.

Broad incumbents

• PCI Security Standards Council: Industry council maintaining payment security standards (PCI-DSS) cited in CCC's banking use cases. Comparable as a vendor-funded standards body whose specifications drive compliance requirements relevant to CCC's regulated-industry messaging.
• Open Compute Project (OCP): Linux Foundation project defining open hardware and data-center standards with hyperscaler members. Comparable as a larger, adjacent Linux Foundation community that influences the hardware platforms on which TEEs run.

Emerging players

• ioXt Alliance: IoT security consortium with certification programs backed by Google, Amazon, and others. Comparable as a vendor-neutral security certification body with similar regulatory-engagement posture to CCC's GRC and Regulatory SIGs.
• FIDO Alliance: Industry consortium producing open authentication standards (FIDO2, WebAuthn) that rely on hardware roots of trust. Partially comparable as a multi-vendor standards body whose success in driving hardware-rooted adoption parallels CCC's TEE ambitions.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/confidential-computing
• YouTubeyoutube.com/playlist?list=PLmfkUJc39uMi3vK9aCFdiD218Fxb9u6U8
• Xx.com/confidentialc2

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Confidential Computing Consortium