Phala
Try Phala on us. Starter credit covers your first requests, then one key reaches all 3 Phala models, with the privacy posture shown on every route.
Phalaphala
These privacy labels describe Phala, the upstream model provider. Confidential requires all three: verified provider compute, end-to-end encryption and explicit zero data retention. Account and billing metadata are outside the content-retention claim.
| Provider | Phala |
|---|---|
| API operator country | Not verified Legal home of the API operator, not an inference-location guarantee. |
| Headquarters | Not verified |
| Routing status | Active |
| Provider website | https://phala.network/ |
| Models | 3 public models |
| Credits routes | 3 |
| Zero data retention | yes All routes |
| Verified confidential inference | Not verified |
| Policy note | Phala publishes TDX/GPU attestation and signed request receipts, but TrustedRouter does not yet verify the complete receipt chain on every routed request. The route is therefore not classified as provider E2EE and is excluded from trustedrouter/e2e. Policy source |
Inference locations
Provider API declarations are also available on each model's endpoint API. Direct chat and Responses replies separate advertised availability from serving location in usage.inference_location; the actual serving region remains unknown when not reported.
usage.provider_usage.gateway_region identifies the TrustedRouter gateway, not the provider's inference location. A value such as europe-west4 does not mean the model ran in Europe. usage.inference_location.serving_region remains null when the provider has not reported it. Older gateways may return the gateway-only field as provider_usage.region.
Where the upstream GPUs execute the model, not the provider's headquarters, API ingress, or data storage. ZDR and confidential inference do not by themselves restrict geography.
- Declared countries or regions
- Not verified
No inference-location declaration has been verified for this provider. - Can locations change?
- Not verified. Do not assume that the serving location is fixed.
- Provider region pinning
- Not verified.
- Pinning through TrustedRouter
- No verified provider-specific location pin documented here.
- Infrastructure declaration
- Inference location not verified; no country-specific residency commitment.
- Evidence
- Not yet reviewed.
Provider selection alone is not a region pin. TrustedRouter's US provider filter selects company jurisdiction, not GPU location. A regional gateway hostname does not pin a downstream GPU. For a binding residency requirement, confirm the model, region, failover scope and enforced controls before sending sensitive data.
Models served by Phala.
Each row links to pricing, provider, benchmark, and API pages for the model.
| Model | AI IQ | Context | Input | Cached input | Output |
|---|---|---|---|---|---|
moonshotai/kimi-k3MoonshotAI: Kimi K3 |
IQ 127#21 | 1,048,576 | $3.165/1M | $0.3165/1M | $15.825/1M |
z-ai/glm-5.1Z.ai: GLM 5.1 |
IQ 113#62 | 202,752 | $1.27655/1M | $0.633/1M | $4.431/1M |
z-ai/glm-5.2Z.ai: GLM 5.2 |
IQ 118#48 | 1,048,576 | $1.3293/1M | $0.2321/1M | $3.165/1M |
Questions
Does Phala have zero data retention?
TrustedRouter records Phala as supporting provider-level zero data retention based on the policy source linked on this page. This is a provider policy claim, separate from TrustedRouter's content-stateless real-time gateway and from end-to-end confidential compute.
Is Phala end-to-end encrypted?
TrustedRouter does not currently mark Phala as end-to-end encrypted at the provider boundary. The TrustedRouter gateway is still attested, but the selected provider normally receives the request in order to run the model. Use trustedrouter/e2e for the stronger route requirement.
Which Phala models are available through TrustedRouter?
This page currently lists 3 public Phala models, with live pricing, route count, context length, measured performance when available, and links to each model's provider and benchmark pages.