FluffyStack toolsJurisdictional exposure
Sub-services (3)
AMD SEV-SNP isolation
Memory and CPU state encrypted at runtime so the hypervisor sees only ciphertext
Remote attestation
Customer-run verification of the TEE's firmware and configuration state
Customer-owned images
VMs built from customer images that IONOS has no visibility into
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (5)
- FrankfurtIONOS Cloud
- BerlinIONOS Cloud
- LogroñoIONOS Cloud
- ParisIONOS Cloud
- LondonIONOS Cloud
Commercial regions (5)
Europe (2)
- Frankfurt 2
- Worcester
North America (3)
- Las Vegas
- Lenexa
- Newark
Tags
Equivalent services on other platforms
VMs and containers that keep data encrypted while in use via AMD SEV-SNP and Intel TDX hardware enclaves, plus Always Encrypted for Azure SQL, Confidential Containers on AKS, and the Managed HSM to protect cryptographic keys — for regulated workloads demanding runtime protection
Confidential computing family built on IBM LinuxONE and Secure Execution for Linux, including Hyper Protect Virtual Servers and Hyper Protect Crypto Services, whose keep-your-own-key HSMs are built on FIPS 140-2 Level 4 certified hardware that even IBM cannot access