Fortanix Confidential Computing Manager is a cloud-native control plane that orchestrates confidential computing environments using Intel SGX and AMD SEV trusted execution environments. It manages enclave lifecycle, code attestation, policy enforcement, and data access for applications running in secure enclaves, enabling existing and new applications to run in protected environments without code changes.

Unsung implements CCM for UK customers that need to protect sensitive data during processing — addressing the "data in use" gap that traditional encryption at rest and in transit does not cover.

Encryption protects data at rest and in transit, but data must typically be decrypted for processing. This creates a vulnerability window during which sensitive data is exposed in memory. For organisations processing highly sensitive information — financial data, healthcare records, classified material, or proprietary algorithms — this gap represents a significant risk, particularly in cloud environments where the underlying infrastructure is shared.

Confidential computing addresses this by processing data within hardware-protected enclaves that prevent access even from the cloud provider or infrastructure administrators. However, managing confidential computing environments — deploying applications to enclaves, verifying code integrity, enforcing access policies — requires orchestration tooling that most organisations lack.