How to meet it
OWASP AISVS v1.01
Infrastructure, Configuration & Deployment Security · AI Hardware Security
Use a trusted execution environment
Verify that execution within a trusted execution environment (TEE) provides hardware-enforced isolation, memory encryption, and integrity protection.
OWASP AISVS v1.01, requirement 4.2.2
In plain English
Run sensitive AI workloads in a trusted execution environment that isolates them in hardware and encrypts their memory.
What good looks like
- Sensitive workloads run in a hardware-backed trusted environment.
- Memory encryption and integrity protection are on.
- Attestation proves the environment before data or keys are released.
How teams usually do it
- Confidential computing instances from your cloud provider, including GPU variants where needed.
Evidence an auditor would accept
- Instance configuration and attestation records.
Common mistakes
- Running only the CPU part of the workload in the protected environment.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.