VMs and containers that keep data encrypted while in use via AMD SEV-SNP and Intel TDX hardware enclaves, plus Always Encrypted for Azure SQL, Confidential Containers on AKS, and the Managed HSM to protect cryptographic keys — for regulated workloads demanding runtime protection
FluffyStack toolsJurisdictional exposure
Attributes
- Encryption In Use
- Yes
- Attestation
- Yes
Sub-services (3)
Confidential VMs
DCasv5, ECasv5, DCesv5, ECesv5 VMs with memory encryption and remote attestation
Confidential Containers on AKS
Kata-Containers-based confidential pods running inside SEV-SNP enclaves
Confidential Ledger
Tamper-proof append-only ledger backed by enclave-attested Merkle trees
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (13)
- Australia Central · CanberraAzure Australia Government
- Australia Central 2 · CanberraAzure Australia Government
- US Gov Virginia · VirginiaAzure Government (US)
- US Gov Arizona · ArizonaAzure Government (US)
- US Gov Texas · TexasAzure Government (US)
- US DoD East · VirginiaAzure Government (US DoD regions)
- US DoD Central · IowaAzure Government (US DoD regions)
- China North (Beijing) · BeijingMicrosoft Azure operated by 21Vianet
- China East (Shanghai) · ShanghaiMicrosoft Azure operated by 21Vianet
- China North 2 · BeijingMicrosoft Azure operated by 21Vianet
- China East 2 · ShanghaiMicrosoft Azure operated by 21Vianet
- China North 3 · HebeiMicrosoft Azure operated by 21Vianet
- China East 3 · ShanghaiMicrosoft Azure operated by 21Vianet
Commercial regions (61)
Europe (21)
- Austria East
- Belgium Central
- Denmark East
- Finland Central
- France South
- France Central
- Germany North
- Germany West Central
- Greece Central
- North Europe
- Italy North
- West Europe
- Norway East
- Norway West
- Poland Central
- Spain Central
- Sweden Central
- Switzerland West
- Switzerland North
- UK West
- UK South
North America (13)
- Canada East
- Canada Central
- Mexico Central
- West US
- East US 3
- North Central US
- Central US
- West US 3
- South Central US
- East US
- East US 2
- West US 2
- West Central US
South America (3)
- Brazil Southeast
- Brazil South
- Chile Central
Asia (14)
- East Asia
- South India
- India South Central
- Jio India West
- West India
- Jio India Central
- Central India
- Indonesia Central
- Japan West
- Japan East
- Malaysia West
- Southeast Asia
- Korea South
- Korea Central
Oceania (3)
- Australia East
- Australia Southeast
- New Zealand North
Middle East (5)
- Israel Central
- Qatar Central
- Saudi Arabia Central
- UAE Central
- UAE North
Africa (2)
- South Africa West
- South Africa North
Tags
Equivalent services on other platforms
Confidential computing family built on IBM LinuxONE and Secure Execution for Linux, including Hyper Protect Virtual Servers and Hyper Protect Crypto Services, whose keep-your-own-key HSMs are built on FIPS 140-2 Level 4 certified hardware that even IBM cannot access
Dedicated-core VMs running in an AMD SEV-SNP trusted execution environment with per-VM memory encryption and customer-run attestation, built from customer-owned images; available in Frankfurt (de/fra/2) on AMD EPYC Turin.