Don’t Trust, Verify: Building End-to-End Confidential Applications on Google Cloud

Google Cloud enables end-to-end confidential applications, protecting sensitive data ‘in-use’ with hardware isolation. The solution combines Confidential Space (TEE/attestation), Oak Functions (private sandbox), and Oak Session (attested end-to-end encryption for scale). This framework anchors user trust in open-source components, proving confidentiality for sensitive workloads like proprietary GenAI models, even when running behind untrusted load balancers.