OpenAI compatible API · Attested · Public status

Tinfoil Alternative — Verifiable Privacy, Every Provider

Same verifiable-privacy bet as Tinfoil, applied as a router. Attested, no-log gateway across 30+ providers with one API.

Verify gateway

Onebase URL to migrate

100sof models and routes

0prompt or output logs. Always.

Tinfoil alternative

Same verifiable-privacy bet. TrustedRouter routes across every provider.

Tinfoil pioneered verifiable confidential inference, and the thesis is right: attestation beats a privacy policy. TrustedRouter shares it — and applies it as a router, not a single inference endpoint.

That means you keep model choice. Route the same attested, no-log gateway to Claude, GPT, Gemini, DeepSeek, Kimi, Llama, Mistral and 20+ more, with automatic fallback, one OpenAI-compatible API, and one key.

Compare models in the playground How attestation works

One API, every providerPython

client = OpenAI(
    base_url="https://api-azure.trustedrouter.com/v1",
    api_key="sk-tr-v1-..."
)

# Same attested gateway, any model:
for model in ["anthropic/claude-sonnet-4.6",
              "openai/gpt-5.5",
              "deepseek/deepseek-v4-flash"]:
    client.chat.completions.create(
        model=model,
        messages=[{"role": "user", "content": "hi"}],
    )

Shared thesis

Verify, don't trust.

Hardware attestation + open source. We agree with Tinfoil on the principle — privacy you can check beats privacy you're promised.

Router, not endpoint

30+ providers, one key.

Don't pick a single confidential model — route the attested gateway to the best model for each job, with fallback when one is down.

Drop-in

OpenAI-compatible.

Change one base_url and keep your existing SDK, model IDs, and code. Migrate an existing OpenRouter or OpenAI integration in minutes.

TinfoilTrustedRouter

AttestationYesYes

Open sourceYesYes

ShapeConfidential inferenceMulti-provider router

Model choiceHosted model set30+ providers, switchable per call

Provider fallbackn/aAutomatic rollover

Best fitA confidential endpoint for chosen modelsVerifiable routing across the whole model market

Same destination, wider road

Attestation should cover the whole market, not one endpoint.

The future where every prompt goes through an attested path shouldn't require giving up model choice. TrustedRouter is the bet that you can have both: verifiable privacy and the full provider market behind one API.

The argument in full: “Attestation is All You Need”.

Live catalog evidence

Current routes, prices, privacy, and measured performance.

Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.

595public models

110providers

1780configured routes

392ZDR routes

48provider E2EE routes

0recent availability samples

Model	Providers	Context	Input	Output	Privacy	Measured route
Z.ai: GLM 5.3`z-ai/glm-5.3`	+30 50 routes	1,048,576	$0.1477/1M to $3.9879/1M	$3.20087/1M to $12.81825/1M	Confidential + ZDR	No measurements yet
Z.ai: GLM 5.2`z-ai/glm-5.2`	+28 48 routes	1,048,576	$0.3587/1M to $2.370374/1M	$1.5825/1M to $6.838973/1M	Confidential + ZDR 4 cited scores	No measurements yet
Z.ai: GLM 5.3 Flash`z-ai/glm-5.3-flash`	+29 48 routes	1,048,576	$0.07385/1M to $0.24869/1M	$0.2532/1M to $0.808243/1M	Confidential + ZDR	No measurements yet
DeepSeek: DeepSeek V4.1 Flash`deepseek/deepseek-v4.1-flash`	+21 37 routes	1,048,576	$0.01055/1M to $0.68575/1M	$0.0844/1M to $1.5825/1M	Confidential + ZDR	No measurements yet
DeepSeek: DeepSeek V4 Flash 0731`deepseek/deepseek-v4-flash-0731`	+23 35 routes	1,048,576	$0.0422/1M to $0.49738/1M	$0.09495/1M to $1.3926/1M	Confidential + ZDR	No measurements yet
Qwen: Qwen3.8 27B`qwen/qwen3.8-27b`	+16 30 routes	65,536	$0.041145/1M to $1.04445/1M	$0.3376/1M to $3.376/1M	Confidential + ZDR	No measurements yet