H2O AI and Fortanix
H2O AI is part of the ecosystem supporting Fortanix Confidential AI on CNCF Confidential Containers (CoCo), announced in October 2026. Fortanix Confidential AI runs AI workloads on Kubernetes inside hardware-based trusted execution environments and releases keys only after attestation, so models and data stay protected while they run. Together, the two companies plan to bring that protection to regulated organizations running sovereign AI.
Partnership overview
Why confidential AI
Encryption protects data at rest and in transit, but during inference model weights and sensitive data sit decrypted in CPU and GPU memory. Fortanix Confidential AI runs those workloads inside hardware-based trusted execution environments and releases encryption keys only after attestation verifies the hardware and the workload, on-premises, in the cloud or air-gapped.
“In the age of AI agent swarms and a growing surface for cyberattacks, confidential computing becomes critical for AI safety and for preserving the sovereignty of organizations. At H2O.ai, we believe every organization is an AI organization, and owning your AI has to include protecting it while it runs. We look forward to partnering with Fortanix to bring that protection to regulated agencies that trust us with their most sensitive AI.”
Sri Ambati
CEO and Founder, H2O.ai
