Privacy & Security
Carpe Diem runs inside a hardware-secured Trusted Execution Environment (TEE). Even the protocol operators cannot access your data.
Live TEE Status
Fetching TEE status...
How It Works
Provider Keys
Venice API keys are encrypted in memory (XOR + AES-256-GCM). No one — not even us — can read them.
Your Requests
Prompts are never logged or stored. Only token counts and costs are recorded. Wallets are pseudonymized via HMAC.
LLM Responses
Responses are streamed directly to you. Nothing is cached or stored on the server.
Data Flow
User (browser) ──HTTPS──▶ Vercel ──HTTPS──▶ Phala TEE (Intel TDX) ──HTTPS──▶ Venice AI
│ RAM encrypted by CPU hardware │ No SSH access │ No shell │ Distroless image │
Privacy Guarantees
Provider Keys
API keys are encrypted in hardware-protected memory. No admin, no host, no one can extract them.
Your Prompts
Never logged, never stored. Only token counts and costs are recorded. Wallets pseudonymized.
AI Responses
Streamed directly to your browser. Nothing cached or stored on the server.
No Admin Access
SSH is disabled. The operator image has no shell. Even the protocol team cannot access the running system.
Internal security audit (AudiBot, Lumen Labs) — May 2026. Independent external audit planned.
Verify Our Attestation
“Don't trust, verify.”
Our TEE attestation is cryptographically verifiable. Anyone can independently confirm that the operator runs inside a genuine Intel TDX enclave with the exact audited code.
8e0ff2a5a53864fc5fc18a40c8b691fb1e9cc881npx phala cvms attestation app_8e0ff2a5a53864fc5fc18a40c8b691fb1e9cc881ghcr.io/geolours/carpe-operator (distroless — no shell, no SSH)On-Chain Contracts (Base mainnet)
The escrow source is verified and reproducible from the repository — Sourcify reports a full bytecode match against the deployed contract.
0x15917768b31CB1DC61d9d858f2419BF45044005d0x53344b3b0a89CaeACD9D0B50bf5B1D21C4A1e9b40x833589fCD6eDb6E08f4c7C32D4f71b54bdA029130xF4d97F2da56e8c3098f3a8D538DB630A2606a024Internal security audit (AudiBot, Lumen Labs) — May 2026 • Independent external audit planned
Infrastructure: Phala Cloud (Intel TDX) • Frontend: Vercel • Inference: Venice AI