Introduction

Solrouter is a cryptographically private AI infrastructure layer for Solana developers. The idea is simple: your prompts, documents, and responses should never exist in plaintext anywhere we could read them. So they don't — not on the wire, not on our backend, and not in any log file. Plaintext lives only inside a hardware-isolated enclave. Privacy here is enforced by math, not by a promise.

Why Solrouter?

Start with the problem. Today, every AI request you send is something the provider can read, store, and analyze.

Mainstream providers keep your prompts indefinitely, ask for personal details to sign up, and back their privacy claims with a terms-of-service page. Nothing technical stops them from reading what you send — you're trusting a policy.

Solrouter removes the need for that trust. We built the system so that we cannot see your data in the first place.

Here's how. Your prompt is encrypted on your device before it leaves your browser or app. Our backend only ever receives an opaque encrypted blob and forwards it, blindly, to an Intel TDX Confidential VM — a TEE (Trusted Execution Environment: hardware that isolates code and data so even the machine's operator can't inspect it at runtime). Plaintext appears only inside that attested enclave, which even we cannot read.

Products

Pick the surface that fits how you work — an SDK to embed in your app, typed agent tools, an MCP server for your editor, or the hosted chat app. They all run on the same private backend.

Key Guarantees

These are the promises that hold for any privacy-mode request, no matter which product you reach for. Each one is a property the system enforces, not a feature you have to remember to turn on.