Protecting data while it is processed by running workloads in hardware-based trusted execution environments. Covers Intel TDX and SGX, AMD SEV-SNP, confidential VMs, containers and GPUs, remote attestation, and confidential services in Azure, AWS and Google Cloud.