Verify the AI enclave
Last updated September 16, 2026
Some of Peachy’s AI features run on open-weight models inside confidential-computing enclaves operated by Tinfoil, as the Privacy Policy describes. The hardware those models run on produces a signed statement naming exactly which code is loaded — a measurement — and Tinfoil publishes the measurement of every release to a public transparency log. Our server checks that statement against the log before it sends the first request and every hour after, pins the enclave’s TLS key to the one the statement names, and refuses to send anything if the check fails.
Below is what our server found, and a button that runs the same check from your browser. If the two agree, you have verified — without trusting us — that the enclave answering Peachy is running the code Tinfoil says it is.
What our server verified
Asking the server…
Verify it in this browser
This runs the same open-source verifier our server runs, here, against inference.tinfoil.sh: it fetches the signed release from GitHub and the Sigstore transparency log, fetches the hardware report from the enclave, and checks that they name the same code. Nothing about you is sent anywhere; it takes a few seconds.
What this does and does not show
- It shows that a specific, publicly recorded build is what runs inside the enclave, and that the connection our server opens to it ends in that build. Tinfoil’s code and their verifier are open source; the measurement can be reproduced from the published release.
- It does not show that Peachy cannot read your messages. Your messages arrive at our servers in a form we can read, and we hold them there. The enclave is a property of where the model runs, not of Peachy. We say this everywhere we describe the feature, and we will change this page the day it stops being true.
- It does not cover Anthropic. Requests that go to Anthropic are covered by our commercial terms with them, not by an attestation; there is nothing to verify here about those.
- Which provider serves you is fixed per account. A request is never silently rerouted from one to the other: if the enclave cannot be verified, requests bound for it fail rather than fall back.
If the two measurements disagree
That would mean your browser and our server verified different code, which should never happen and is exactly what this page exists to catch. Please email support@pchy.app with “security” in the subject and both measurements; the security page says what we promise in return.