OpenAI compatible API · Attested · Public status

Tinfoil Alternative — Verifiable Privacy, Every Provider

Same verifiable-privacy bet as Tinfoil, applied as a router. Attested, no-log gateway across 30+ providers with one API.

Verify gateway

Onebase URL to migrate

100sof models and routes

0prompt or output logs. Always.

Tinfoil alternative

Same verifiable-privacy bet. TrustedRouter routes across every provider.

Tinfoil pioneered verifiable confidential inference, and the thesis is right: attestation beats a privacy policy. TrustedRouter shares it — and applies it as a router, not a single inference endpoint.

That means you keep model choice. Route the same attested, no-log gateway to Claude, GPT, Gemini, DeepSeek, Kimi, Llama, Mistral and 20+ more, with automatic fallback, one OpenAI-compatible API, and one key.

Compare models in the playground How attestation works

One API, every providerPython

client = OpenAI(
    base_url="https://api.trustedrouter.com/v1",
    api_key="sk-tr-v1-..."
)

# Same attested gateway, any model:
for model in ["anthropic/claude-sonnet-4.6",
              "openai/gpt-5.5",
              "deepseek/deepseek-v4-flash"]:
    client.chat.completions.create(
        model=model,
        messages=[{"role": "user", "content": "hi"}],
    )

Shared thesis

Verify, don't trust.

Hardware attestation + open source. We agree with Tinfoil on the principle — privacy you can check beats privacy you're promised.

Router, not endpoint

30+ providers, one key.

Don't pick a single confidential model — route the attested gateway to the best model for each job, with fallback when one is down.

Drop-in

OpenAI-compatible.

Change one base_url and keep your existing SDK, model IDs, and code. Migrate an existing OpenRouter or OpenAI integration in minutes.

TinfoilTrustedRouter

AttestationYesYes

Open sourceYesYes

ShapeConfidential inferenceMulti-provider router

Model choiceHosted model set30+ providers, switchable per call

Provider fallbackn/aAutomatic rollover

Best fitA confidential endpoint for chosen modelsVerifiable routing across the whole model market

Same destination, wider road

Attestation should cover the whole market, not one endpoint.

The future where every prompt goes through an attested path shouldn't require giving up model choice. TrustedRouter is the bet that you can have both: verifiable privacy and the full provider market behind one API.

The argument in full: “Attestation is All You Need”.

Live catalog evidence

Current routes, prices, privacy, and measured performance.

Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.

394public models

49providers

1270configured routes

250ZDR routes

8provider E2EE routes

2555recent availability samples

Model	Providers	Context	Input	Output	Privacy	Measured route
Z.ai: GLM 5.2`z-ai/glm-5.2`	+22 45 routes	1,048,576	$0.714/1M to $1.575/1M	$1.575/1M to $5.5125/1M	E2EE 4 cited scores	3597 ms TTFT parasail · 29 tok/s · 97.50% available · n=237
DeepSeek: DeepSeek V4 Flash 0731`deepseek/deepseek-v4-flash-0731`	+5 16 routes	1,048,576	$0.0945/1M to $0.147/1M	$0.189/1M to $0.294/1M	ZDR	1205 ms TTFT deepseek · 136 tok/s · 100.00% available · n=190
DeepSeek: DeepSeek V4 Pro`deepseek/deepseek-v4-pro`	+9 24 routes	1,048,576	$0.45675/1M to $2.52/1M	$0.9135/1M to $5.04/1M	ZDR 5 cited scores	3449 ms TTFT gmi · 37 tok/s · 100.00% available · n=73
Z.ai: GLM 5.1`z-ai/glm-5.1`	+9 24 routes	204,800	$1.02375/1M to $1.617/1M	$3.234/1M to $5.082/1M	confidential 5 cited scores	2656 ms TTFT friendli · 100.00% available · n=63
DeepSeek: DeepSeek V4 Flash 0423`deepseek/deepseek-v4-flash`	+9 22 routes	1,048,576	$0.0945/1M to $0.21/1M	$0.189/1M to $0.42/1M	ZDR 5 cited scores	1577 ms TTFT deepseek · 90 tok/s · 100.00% available · n=45
Qwen: Qwen3.6 35B A3B`qwen/qwen3.6-35b-a3b`	+4 12 routes	262,144	$0.04725/1M to $0.39375/1M	$0.315/1M to $2.3625/1M	ZDR	1899 ms TTFT engy · 100.00% available · n=44