The B300 keeps your data encrypted inside the GPU.
Blackwell Ultra encrypts GPU memory and the links between GPUs in hardware. It pools up to eight GPUs into one encrypted memory space. Hopper encrypts one GPU at a time (80 GB). Every lane we sell runs on Blackwell.
- GPU memory encrypted The GPU encrypts its own HBM. Nothing outside the chip reads your data while it computes.
- NVLink encrypted The links between GPUs are encrypted too. Data stays encrypted as it moves from one GPU to the next.
- Two attestation reports Intel signs the processor quote. NVIDIA signs the GPU report. Each is verified with its vendor's own tools.
Blackwell and Hopper
| H100 | B300 | |
|---|---|---|
| Encrypted memory in one confidential VM | 80 GB (one GPU at a time) | 2304 GB (8 GPUs pooled) |
| NVLink encrypted | No | Yes |
| Memory per GPU | 80 GB HBM3 | 288 GB HBM3e |
| Bandwidth | 3.35 TB/s | 8 TB/s |
Every B300 runs in our Texas data center.