Prompts arrive over AntSeed's end-to-end encrypted transport (X25519 + AES-256-GCM) and are proxied in memory. Never written to disk, logs, or databases. We persist only token counts, model name, latency, and a pseudonymous peer id.

Inference runs exclusively on Venice AI private-tier capacity, a provider contractually committed to not logging prompts. Upstream credentials live in memory-only pools, never on disk.

Responses stream straight back through the encrypted channel. Nothing is cached or stored: no response bodies, no embeddings of them, no "abuse-prevention" retention.

Content is never persisted. Operational metadata only: token counts, latency, error codes.

Seller-side access is single-operator, key-only, and audited. The buyer stack has no interactive access at all; it runs inside the attested TEE above.

API users fund their own buyer address in the AntSeed escrow contract on Base. We never custody deposits. Your buyer key backup lets you withdraw without our involvement, even if we vanish.

The buyer gateway and mux are fully open source: read exactly what is kept and what is discarded, line by line, and match it against the live attestation above.