GitHub-connected deployment can make confidential computing feel like ordinary managed hosting.
Synclave
Helps developers move privacy-sensitive applications from managed hosting into confidential-computing environments without rebuilding them for a new platform.
Key takeaways
Shared enclaves trade some isolation for lower cost and operational friction.
The same application can later move into a private, attested VM without re-platforming.
Summary
The speaker introduced Synclave as a managed deployment service for applications whose users care about data privacy. In the described entry flow, a developer connects a GitHub repository and Synclave deploys the application into a shared confidential-computing environment.
The middle tier is a shared enclave: multiple sandboxed applications run inside a confidential virtual machine, prioritizing convenience while carrying less isolation and trust than a dedicated environment. The speaker also said this tier could use private inference through a RedPill and Phala integration.
When an application is ready to launch more broadly, the proposed next step is a one-click promotion into a private, fully attested confidential virtual machine. The speaker framed this as a way to scale without re-platforming.
The motivation is the operational and financial burden of running confidential-computing infrastructure directly, which the speaker described as substantially greater than ordinary cloud hosting.
How it works
Connect a repository
Connecting GitHub automatically deploys the application into a managed shared confidential-computing environment.
Upgrade to a shared enclave
The application runs sandboxed beside other applications in a confidential VM, trading dedicated isolation for lower cost and convenience.
Promote to a private CVM
Planned one-click promotion would move the same application into a fully attested private CVM without requiring it to be re-platformed later.
Transcript
Yeah, so we actually started as, TEESQL, but Synclave was more interesting to the teammates. So I'm Dan. This is Crystal. We also have another teammate, Fran, who unfortunately couldn't be here. But rather than talk about us, I'd actually like to talk about Albie. So Albie, as you heard, is shipping Pitch Rotator, and obviously, right, like, your pitch is your most important information. You haven't actually raised yet, or maybe you have, but a small amount. Your competitive advantage is being given away to this platform. So obviously, various customers care about privacy. I know I do, right? I trust Albie, but I don't necessarily trust Anthropic or OpenAI. So with a product like this, she really needs to focus on making sure that her customers' data stays private, right?
So enter confidential compute. Unfortunately, trusted execution environments and CVMs are incredibly, incredibly difficult to set up and run. If you want to buy your own machine, you're talking probably hundreds of thousands of dollars. If you want to rent it, probably a couple thousand a month. For the base level entry CVM, the type of thing that would cost you five dollars on a typical cloud platform, you're going to spend at least fifty dollars a month. So enter Synclave, right? Synclave starts with a product very similar to, Vercel, right? So if Albie has her marketing platform and she wants to go ahead and collect email, she can deploy for free, hook up GitHub to the app in Synclave, and Synclave will deploy for her automatically inside of a shared CVM environment.
Again, this is free. When she's ready to go to, actual, like, MVP stage and get real customers on board, she can upgrade to a five dollar a month shared enclave. So a shared enclave is essentially a sandbox running with other apps inside of a CVM, and what the shared enclave gives her is convenience without as much trust, right? So at the beginning with an MVP, she's bringing on people like me who know her, who trust her. Critically, she can use private inference in this environment. So we've partnered with RedPill, a Phala product, to make sure that GLM 5Q and a number of other frontier open source models are available to Albie and her team. So moving on, as Albie produces a product that she knows is right and she wants to actually launch it and spread it to her network, one click of a button is going to allow her to promote it to a full CVM.
So this five dollar shared enclave becomes a private environment fully attested for Albie's use and the confidence of her customers.
So critically, when Albie gets to the point where she's ready to scale, she's gotten a few viral moments, she doesn't have to re-platform. We support deploying to GCP. We support deploying to AWS all through dstack. We've got, partnerships with Phala, who built dstack in collaboration with Andrew Miller and Flashbots, and we've, moved on to partner with another of, a number of hardware providers who will help to provide the data center substrate if Albie doesn't want to think about her own accounts. But the second that Albie wants to use her own account, she can.
