Apex Ant is a Venice-only inference router on the AntSeed P2P network. Prompts and responses are never logged or persisted — only token counts and costs. Today this is enforced by architecture and policy; the serving stack is migrating into a hardware TEE where it becomes cryptographically verifiable.
The hosted buyer stack (mux + gateway) runs inside a Phala Cloud Intel TDX enclave. This block compares the live hardware quote of the running VM against image digests published in the public repo — refreshed every minute. Green: the code holding your keys is exactly the code you can read.
Prompts arrive over AntSeed's end-to-end encrypted transport (X25519 + AES-256-GCM) and are proxied in memory. Never written to disk, logs, or databases. We persist only token counts, model name, latency, and a pseudonymous peer id.
Inference runs exclusively on Venice AI private-tier capacity — a provider contractually committed to not logging prompts. Upstream credentials live in memory-only pools; after the TEE migration they will exist only inside the enclave.
Responses stream straight back through the encrypted channel. Nothing is cached or stored — no response bodies, no embeddings of them, no "abuse-prevention" retention.
Content is never persisted. Operational metadata only: token counts, latency, error codes. Verifiable after TEE migration via remote attestation of the exact running code.
The TEE operator image will ship distroless: no shell, no SSH. Even we won't be able to inspect a running request. Until then, access is single-operator, key-only, and audited.
API users fund their own buyer address in the AntSeed escrow contract on Base — we never custody deposits. Your buyer key backup lets you withdraw without our involvement, even if we vanish.
The request sanitizer and the gateway source publish with the TEE launch — read exactly what is kept and what is discarded, line by line.
Our pricing promise is verifiable today: the live board is regenerated every 15 minutes from public Venice list prices. After the TEE migration, the serving stack itself becomes verifiable — this page will carry the live attestation block:
| TEE platform | Phala Cloud CVM · Intel TDX after migration |
| CVM app id | publishes at launch |
| Verify via CLI | npx phala cvms attestation <app-id> |
| Operator image | digest pinned · distroless · reproducible |
| Trust center | live attestation page, modeled on Phala Trust Center |
our seller, on-chain: 0x73b4c9335fa239f9c6df3d28d5bf5d3cdf4de736 · settlement: AntSeed deposits & channels contracts, Base mainnet · antseedstats
questions → @apex_ant. we answer.