Hardware-enforced confidential computing with AWS Nitro Enclaves. Zero host access to data. Full attestation on every request.