OpenAI compatible API · Attested · Public status

Private LLM API — Verifiable, Attested, Open Source

A private LLM API where privacy is cryptographically verifiable. Route to Claude, GPT, Gemini, DeepSeek through an attested gateway.

Verify gateway

Onebase URL to migrate

100sof models and routes

0prompt or output logs. Always.

Private LLM API

A private LLM API where "private" means cryptographically verified.

Every hosted LLM provider claims privacy. Almost none of them give you a way to verify it.

TrustedRouter routes to every major model — Claude, GPT, Gemini, DeepSeek, Kimi, Llama, Mistral — through a hardware-attested gateway. The code is open source. The image is hashed. You can check what runs.

Try the playground Trust surface

Standard callOpenAI SDK

client = OpenAI(
    base_url="https://api-azure.trustedrouter.com/v1",
    api_key="sk-tr-v1-..."
)

resp = client.chat.completions.create(
    model="anthropic/claude-sonnet-4.6",
    messages=[
        {"role": "user", "content": "your prompt"}
    ],
)
# No logs. Source verified. Attestation on demand.

Verifiable

Read the source.

Every line that handles your prompt is on GitHub. Search it. Audit it. Run it locally if you want.

Attested

Hardware-rooted trust.

The gateway runs inside GCP Confidential Space. The hardware-backed attestation signs the running image. You verify the signature.

Fail-closed

No request without attestation.

If the gateway can't prove its own integrity, traffic stops. The synthetic monitor probes this every minute and pages on the first miss.

What "private" actually means here

Things that are zero, with proof.

Prompt body. Never written to disk. Never shipped to a logging service. The binary doesn't open a write handle to a prompt path. You can grep for this.

Output body. Same. The streamed response goes from upstream provider straight back to you. TR sees it in transit; it never persists.

Per-request audit trail. What TR does log: token counts, timestamps, model id, region, billing. No content. The schema is in the open-source code.

Upstream provider behavior. Out of TR's control. We publish each provider's known retention and ZDR posture on every model page so you can route deliberately.

Direct providerTrustedRouter

Privacy claimPrivacy policyVerifiable in source + attestation

SourceClosedOpen

Multi-modelOne provider30+ providers, one API

Provider rolloverNoYes — automatic on failure

Self-hostNoYes

Live catalog evidence

Current routes, prices, privacy, and measured performance.

Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.

392public models

49providers

1270configured routes

250ZDR routes

8provider E2EE routes

887recent availability samples

Model	Providers	Context	Input	Output	Privacy	Measured route
Anthropic: Claude Opus 4.8`anthropic/claude-opus-4.8`	3 routes	1,000,000	$5.25/1M	$26.25/1M	varies 5 cited scores	1598 ms TTFT anthropic · 100.00% available · n=5
OpenAI: GPT-5.5`openai/gpt-5.5`	4 routes	1,050,000	$5.25/1M	$31.5/1M	ZDR 3 cited scores	Warming up
Google: Gemini 3.5 Flash`google/gemini-3.5-flash`	+1 7 routes	1,048,576	$1.575/1M	$9.45/1M	ZDR	measured google-ai-studio · 0.00% available · n=14
MoonshotAI: Kimi K2.7 Code`moonshotai/kimi-k2.7-code`	+8 19 routes	262,144	$0.735/1M to $0.9975/1M	$3.675/1M to $4.2/1M	ZDR 5 cited scores	measured inceptron · 0.00% available · n=14
Z.ai: GLM 5.2`z-ai/glm-5.2`	+22 45 routes	1,048,576	$0.714/1M to $1.575/1M	$1.575/1M to $5.5125/1M	E2EE 4 cited scores	measured engy · 0.00% available · n=73
MiniMax: MiniMax M3`minimax/minimax-m3`	+8 21 routes	1,048,576	$0.2835/1M to $0.63/1M	$1.155/1M to $2.52/1M	ZDR 4 cited scores	2056 ms TTFT wafer · 100.00% available · n=21