dstack
An open framework for deploying AI applications with cryptographic privacy guarantees using confidential VMs and GPUs.
What is dstack?
dstack is an open framework for confidential AI that allows developers to deploy AI applications with cryptographic privacy guarantees. It runs containers inside confidential virtual machines (Intel TDX) with native support for NVIDIA Confidential Computing, ensuring data remains encrypted in memory and inaccessible to the host. Users can cryptographically verify exactly what code is running, providing a trustless alternative to traditional AI deployments.
AI developers, infrastructure engineers, and organizations needing to deploy sensitive AI workloads with verifiable privacy guarantees, such as those in healthcare, finance, or research.
Developers choose dstack because it offers a full-stack solution for confidential AI out of the box, including automatic attestation, per-app key derivation, and Docker-native workflows, without the manual complexity of cloud provider primitives. Its open-source nature and support for hardware-rooted security provide a verifiable and trustless alternative to proprietary AI hosting.
Overview
Open framework for confidential AI
Use Cases
Best For
- Deploying sensitive AI models where data privacy is critical
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
