Co-founder
enclaive
enclaive provides a confidential computing platform that encrypts data even while it is being processed, closing the security gap left by traditional encryption. The platform, eMCP, uses hardware-based Trusted Execution Environments (TEEs) to isolate workloads and only releases keys after verifying the environment hasn't been tampered with. It enables deployment of confidential VMs, Kubernetes clusters, and databases across major clouds without requiring code changes.
- Cybersecurity
- Enterprise Software
- Software Only
- Artificial Intelligence
Updated 13 days ago
Funding
Raised to date
€5.8MRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Est. $6.3M$4.5M across 1 disclosed round
AA€4.1M · Seed
Announced Feb 2026 · from article date
Disclosed cumulative: $4.5M
Reported total $6.3M
Incomplete round history. $1.8M of the $6.3M reported total isn’t matched to a known round.
RoundDateAmountValuationInvestors
Founders
Product
Problem
Traditional cloud encryption protects data at rest and in transit, but the moment an application processes data, it sits in memory in plain text, readable by cloud admins, hosting staff, or anyone with privileged access. This exposure gap blocks cloud and AI initiatives in regulated industries, creates legal and audit friction, and undermines digital sovereignty efforts.
Solution
enclaive provides a confidential computing platform called eMCP that isolates data and code from the underlying infrastructure using hardware-based Trusted Execution Environments (TEEs) built on AMD SEV-SNP, Intel TDX, and Arm CCA silicon. Workloads run in encrypted memory, and keys are only released after the environment cryptographically proves it has not been tampered with — no proof, no key. The platform provisions confidential VMs, Kubernetes clusters, and managed databases into AWS, Azure, Google Cloud, European clouds, or on-premises hardware, all from one console, without requiring code changes. A virtual HSM and secrets management layer let customers hold their own keys, while attestation evidence and audit artifacts are generated automatically for compliance reporting.
Target Audience
enclaive targets regulated industries including healthcare, public sector, finance, legal, and critical infrastructure, as well as enterprises undergoing cloud migration and AI adoption that require technical data sovereignty and compliance with frameworks like GDPR, NIS2, and gematik requirements.
Features
- Hardware-based memory encryption via AMD SEV-SNP, Intel TDX, and Arm CCA, protecting data while it is being processed
- Attestation-gated key release that verifies workload integrity before any secrets or keys are handed over
- Confidential VMs (Buckypaper), confidential Kubernetes clusters (Dyneemes), and encrypted-in-use managed databases (MariaDB, PostgreSQL) deployable across multiple cloud providers
- Virtual HSM and Vault-based secrets management with customer-held keys (BYOK/HYOK), dynamic time-bound credentials, and HA clustering
- One console and API for deployment, policy, attestation status, and evidence across all environments, with native audit logs in the customer's own cloud account
- Attested CI/CD with signing keys released only to verified build environments, protecting the software supply chain
- Confidential AI support including pseudonymization layers for external models and protected RAG workloads