Skip to content
Contact us
Products/T3 Network

Hardware-attested cryptography, secured by network consensus.

A powerful and novel confidential computing network.

Get startedRead our docs
T3 Network chip
About T3 Network

Access to data should never require its transfer

The T3 Network is a powerful and novel confidential computing network that guarantees the security, privacy, and compliance of every Terminal 3 solution.

The Problem

Traditional data infrastructure requires data to be copied into applications for use, creating data liability, breach risk, and compliance burdens across your enterprise stack. The exposure grows with every system that touches the data, and especially so when AI agents become involved.

Overview

Use sensitive data without security, privacy, or compliance risks. The T3 Network enables enterprises to store, compute, and audit regulated and private data within hardware-secured storage, across boundaries and borders, without any risk exposure.

Platform

Every layer of T3 Network explained

From per-value encryption to data processing, ultimate privacy and security is native design in our architecture

01Encryption at the source

Every value is encrypted with quantum-resistant AES-256-GCM before it leaves the client. Plaintext never travels to the network.

02Threshold key management

The encryption key is split across multiple independent TEE nodes using ML-KEM (FIPS 203). Decryption requires a quorum, so compromising one node reveals nothing.

03Private data storage

Encrypted values stay in storage pinned to your jurisdiction. Data use does not require data transfer.

04Secure processing in sealed hardware

Computation runs only inside hardware-attested TEEs. Data is decrypted, processed, and re-encrypted within the enclave; operators, insiders, and AI agents never see raw data.

05Tamper-proof record

Every protected action and computation is written to a Merkle-tree-backed ledger, cryptographically signed and independently verifiable by any third party. The immutable audit trail is tamper-proof.

Use cases

Who T3N is for

T3N is built for companies, organizations, consortiums, and platforms that require data storage and processing across trust boundaries: institutional silos, competitive entities, or regulatory borders.

Multinational Corporation

One company, multiple jurisdictions

Your subsidiaries each hold private customer or operational data in their own country. You want to run analytics or reporting across entities without breaching data privacy or residency rules.

For example, a bank with entities in Singapore, the EU, and Japan.

Get a demo
Branch analytics dashboard showing user distribution across Singapore, the EU, Japan, and Hong Kong beside a segment builder

How the network secures your data

Security, privacy, and compliance, guaranteed by hardware-attested cryptography and network consensus

Security

Your code runs where no operator, insider, AI agent, or vendor can reach it.

What a TEE provides

  • Sealed hardware isolation
  • Resists privileged-access attacks

What network consensus adds

  • Code changes detected and rejected by the network
  • Security remains intact even if nodes are compromised

Privacy

Your data is stored and processed with complete privacy; no unauthorized party can access it.

What a TEE provides

  • Raw values never exposed
  • Data is encrypted before leaving client

What network consensus adds

  • Compute runs across private data sources
  • Keys split; quorum required to decrypt

Compliance

Every action is provable to a regulator or compliance officer, and data remains in its originating jurisdiction.

What a TEE provides

  • Provable in hardware enclaves

What network consensus adds

  • Data pinned to regions
  • Signed, immutable audit ledger
  • Verifiable by third parties
Products

Built on T3 Network

Every Terminal 3 product runs on T3N and inherits its hardware-grade security, privacy, and compliance.

Agent Command
Enterprise AI Governance

Secure and monitor your AI agent workforce.

T3 Identity
Universal Digital Identity

Issue verifiable digital identities and secure private data in self-sovereign storage.

T3 Identity — universal identity across enterprise divisions
T3 Verify
Smart Verifiable Credentials

Issue and validate smart verifiable credentials, with just-in-time verification against protected data.

T3 Verify — Smart Verifiable Credentials
Agent Developer Kit
Build Trusted AI Agents

Give every agent a verifiable identity, payment credentials, and hardware-sealed secrets.

Agent Developer Kit — build trusted AI agents
Deployment

Flexible deployment for every institution

T3 Network runs on hardware-secured confidential compute. Pick the deployment model that fits your infrastructure and compliance needs, all three deliver the same hardware-attested guarantees.

Option 1
Private Node on Public Mainnet

Companies operate a dedicated node on the public-permissioned network, retaining data privacy while leveraging the full network security of T3N.

Node-level isolation from other customers
Managed by internal IT, or as managed service by Terminal 3
Enterprise private storage in your jurisdiction
Terminal 3 GCP environment
Your organization
Other tenants
No cross-customer node sharing
Terminal 3Managed by Terminal 3

Contact us to discuss which model is right for your organization.

Security & compliance

Security and compliance, built into the infrastructure

We take security seriously and have implemented robust measures to protect your data.

AICPA SOC 2 certificationSOC 2 Type 1SOC 2 Type 2ISO27001GDPR ready
Security at Terminal 3 →

FAQs

Need more answers? Talk to an expert →
Traditional cloud storage providers encrypt data at rest, but applications must decrypt data into memory to process it — creating an exposure window and a custody obligation. T3 Network enables computation on encrypted data inside Trusted Execution Environments: applications send queries, T3 Network executes them in hardware isolation, and applications receive results without plaintext ever leaving the enclave. Additionally, T3 Network uses threshold cryptography — no single entity, including Terminal 3, can decrypt data alone.
A Trusted Execution Environment is a hardware-isolated processor region where code runs and data is processed in isolation from the surrounding operating system, hypervisor, and infrastructure operator. Data inside a TEE is encrypted by dedicated hardware and inaccessible even to privileged processes on the same machine. T3 Network uses TEEs to execute computation on sensitive data without that data being accessible to anyone — including Terminal 3 infrastructure operators.
When data is written to T3 Network, you specify the required jurisdiction for each value (EU, APAC, North America). T3 Network stores that value exclusively in network nodes within the required jurisdiction. Applications query data through universal DIDs; T3 Network routes computation to the correct region and returns results. PII never crosses jurisdictional borders, satisfying GDPR, PDPA, and APPI residency requirements at the infrastructure layer.
Threshold cryptography splits an encryption key into multiple shares distributed across independent parties. Decryption requires a minimum number of shares. No individual share reveals anything about the key, and single-party compromise leaves data fully protected. T3 Network uses ML-KEM (FIPS 203) threshold key management to ensure that no single node, operator, or entity — including Terminal 3 — can decrypt user data unilaterally.
Every data access, computation, policy evaluation, and credential verification generates an audit entry stored in a Merkle-tree-backed immutable ledger distributed across the T3 Network network. Each entry is cryptographically linked to all prior entries and tampering with any entry invalidates the entire chain from that point. Audit logs are independently verifiable by third-party auditors; no T3 Network operator can selectively delete or modify entries.
All of them. T3 Identity stores and processes customer data in T3 Network's TEEs. T3 Verify anchors Smart Verifiable Credentials in T3 Network and uses its Issuer and Revocation Registries for real-time validation. Agent Auth and Agent Connect store agent credentials and authorization policies in T3 Network. Every Agent Command product logs agent actions in T3 Network's tamper-proof audit ledger. T3 Network is the trust layer every product inherits.
T3 Network uses two NIST-approved post-quantum cryptographic standards: AES-256-GCM for data encryption at rest and ML-KEM (FIPS 203) for threshold key management. Private user data never touches the blockchain even in encrypted form, eliminating the risk of long-lived on-chain ciphertext being decrypted by future quantum computers. Both algorithms are approved under FIPS 140-3 compliance requirements.
Yes. Developers can access T3 Network primitives, including TEE-secured computation, encrypted storage, DID resolution, and credential registry queries through the Terminal 3 developer APIs. The Agent Dev Kit (Agent Auth + Agent Connect) provides the primary self-serve entry point for developers building AI agent workflows that need T3 Network's security guarantees.
READY TO BUILD

The trust layer under
everything you build

Access data through computation, not custody — the foundational guarantee every Terminal 3 product delivers

Let's talk →