TEE Verifier, explained for beginners

TEE Verifier checks that a sealed-hardware report really comes from the chip maker, using the maker's published root keys.

What it is

Some companies run AI on special hardware, a trusted execution environment (TEE), that seals the work off even from the cloud provider's own staff. The hardware produces a signed report saying what is running inside.

A report is only worth something if it is checked against the chip maker's genuine root key. TEE Verifier holds the published root keys for AWS Nitro and AMD SEV-SNP, with their fingerprints and official sources, and checks reports against them. The demo shows which roots it trusts so anyone can compare them with the makers' own.

An everyday comparison

Checking a passport's chip against the issuing country's official key, not trusting the photo.

How it works, in 4 steps

1. The workload's hardware produces a signed report.
2. The verifier checks the report's chain up to the maker's root key.
3. It only trusts roots it has pinned from the maker's published source.
4. Valid, or rejected with the reason.

Try it now

Open the three live demo tools → Every button sends a real request to the live product and shows the real answer.

See it on the homepage: TEE Verifier section →

Who it is for

Companies processing sensitive data with AI in confidential-computing hardware, and their customers who must check the claim.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.