We Value your Privacy
We use cookies in the delivery of our services. To learn about the cookies we use and information about your preferences and opt-out choices, please click here.
ABOUT
ABOUT
ABOUT
ABOUT

OPAQUE, The Confidential AI Company

Unblocks AI value by making trust verifiable.
OPAQUE is the trust layer for AI, enabling organizations to safely run AI on their most sensitive systems and data through hardware-enforced governance and independently verifiable proof.
A group of people sitting on the steps of a building.

Why we exist


AI is about to touch the most human things we have — our health records, our finances, our private conversations, the decisions that shape our lives. The promise is extraordinary. But it arrives with a quiet bargain almost no one agreed to: to use AI, you hand over your data and hope it's handled well.

We started OPAQUE to break that bargain. The price of AI should not be your data.

Every hospital, bank, and government putting AI near something that matters asks the same question first: Can I trust it? Today the honest answer is "you'll have to take our word for it." Faith is not a security model. Trust shouldn't be a promise, a policy document, or a vendor's reputation — it should be something you can verify, enforced in hardware and backed by proof, every single time.

And every honest builder knows the deeper reason this matters: these systems leak. A chatbot spills context onto servers no one controls. Agents are worse — give one real reach and even a one-percent chance of leaking, run a thousand of them, and it stops being might. It will. That isn't a flaw to apologize for; it's the nature of the technology. The answer isn't to trust harder. It's to make trust unnecessary — to prove the data stayed protected no matter what the system did.

In June 2026, Apple proved that's possible at a scale no one had attempted: verifiable, private AI across a billion iPhones — fast enough and cheap enough for consumers, running even on hardware Apple doesn't own. If it can be done on the phone in your pocket, your bank can do it for your trades and your hospital can do it for your chart. The excuse that verifiable privacy is too slow or too expensive is gone. Apple drew the line. Our job is to put it within reach of everyone else.

That conviction is the whole company. When trust can be *proven* instead of promised, the doors bolted shut today swing open: regulated industries, the most sensitive data, agents that take real action in the real world. Verifiable trust is how AI finally connects to the systems that run the world — safely, and on terms you can check yourself.

We build the layer that makes that possible.


What's really at stake


This is bigger than any one product, any one deal — bigger than OPAQUE.

Data sovereignty — the ability of a person, a hospital, a company, or a nation to run AI on its own data, on its own terms, without surrendering control — is becoming a fundamental right. Not in a woo-woo sense. In a load-bearing one.

Because if sovereignty fails, AI doesn't just get riskier — it consolidates. The reasoning engine behind every diagnosis, every contract, every customer conversation collapses into one or two companies that power the cognitive infrastructure of the entire world — every industry, every government, every institution renting its ability to think from a handful of owners who answer to no one. That isn't a market. It's dependence at a scale civilization has never run before.

We don't believe that future is inevitable — and preventing it is the work. When data stays sovereign, the global AI economy stays open, competitive, and plural: thousands of institutions building on their own data instead of a few platforms building on everyone's. A healthy economy, stable institutions, a free society — each now rests on getting this one thing right. We think it's the most important problem in technology this decade. It's why we're here.

The problem we're solving


Enterprises are giving AI agents real reach — to read email, query CRMs and databases, and execute transactions and take actions with real-world consequences. The first problem is that agents are non-deterministic: they don't reliably do only what they're told. They call tools they shouldn't, reach data outside their task, and take actions no one approved. The second problem is that the same reach can be turned against you: a single piece of untrusted content — an email, a document, a support ticket — can contain hidden instructions that hijack an agent into quietly exfiltrating internal data.

Unreliable governance is the single most-cited reason enterprises won't put agents near sensitive data or critical systems. The reach is there. The trust isn't.

A group of people standing in front of a tall clock tower.
A man and a woman standing in front of a whiteboard.
A black and white photo of a glass door.

Why most fixes stop at the surface


Most of the industry has tried to solve these challenges at the content layer — wrapping agents in guardrails that screen what goes in and what comes out. Guardrails help, but they're expensive and still leak: no filter reliably predicts a non-deterministic system, and none catches every hidden instruction.

A durable solution works in three layers. The content layer screens inputs and outputs — necessary, but never sufficient on its own. Beneath it, a governance layer decides what an agent is allowed to do: which tools, which data, which actions. And beneath that, a confidential-computing layer enforces those decisions where software alone can't — constraining what an agent can reach, stopping data from leaving through unapproved paths even when an agent misbehaves or is manipulated, and producing independently verifiable evidence that the rules held.

OPAQUE delivers both layers beneath the surface. A software governance layer you adopt as you build — defining and enforcing what an agent may do while you pilot, before anything reaches production. And OPAQUE Confidential Runtime, which takes those same governed workloads and enforces them in hardware, producing independently verifiable proof that the rules held. Govern your agents as you build them; run them on the Confidential Runtime — or bring any container — and that governance becomes provable.

Decide. Enforce. Prove. That's not a feature. It's the layer agents have been missing.


Where we come from


OPAQUE began at UC Berkeley's RISELab — the research group that produced much of the infrastructure the modern data and AI stack runs on. In 2017 the team built a system called Opaque: a way to run analytics over data that stayed encrypted and invisible the entire time it was being computed on — oblivious processing, proven in hardware. The science was a decade ahead of the market. Then AI agents arrived, the need became urgent, and the moment caught up to the work.

OPAQUE was founded and built by people who helped define this field:

  • Ion Stoica — UC Berkeley professor and co-founder of Databricks and Anyscale, who has built systems the entire industry now depends on.
  • Raluca Ada Popa — one of the world's foremost researchers in encryption and systems security, and the architect of much of the cryptography that makes confidential computing real.
  • Rishabh Poddar — co-creator of the original Opaque research and the technical force turning a decade of breakthroughs into a production platform.
  • Chester Leung — an early architect of the system, there from the foundational work.
  • Wenting Zheng — lead creator of the original Opaque system and a leading researcher in secure computation.



They had the breakthrough. What they wanted was an operator to carry it to the world — to turn the science into a company and a movement. So in October 2023, as generative AI was redefining every industry, they asked Aaron Fulkerson to join as CEO: a veteran startup founder and CEO with deep roots in open source, who pioneered new zero-to-billion-dollar annual business units at ServiceNow. The mandate was simple — take what the lab proved is possible and make it the default way the world runs AI.

In 2026, Imran Siddique joined as Chief Platform Officer. Over eighteen years at Microsoft building the core services of Azure, he created the de facto industry standard for agent governance — the Agent Governance Toolkit (AGT), the first open-source framework to cover all ten of the OWASP Agentic Top 10 risks. It earned more than 4,000 GitHub stars in sixty days and has been widely adopted across enterprise and sovereign operators.


Why we're called OPAQUE


The name isn't marketing. It's the name of the system this company was built on — and it still describes exactly what we do.

OPAQUEOblivious Processing, Attested · Universal · Evidence.

Read it in two halves. Oblivious Processing is how it runs: your AI computes on data nobody can see — not the cloud, not the operator, not even us. Attested, Universal, Evidence is what it produces: a hardware-attested, portable, independently verifiable proof that the rules were enforced. Not "trust us." Evidence you can check anywhere.

And the p and q? Some products are better left unfactored.

Opaque by construction.

Leadership

profile shot of the leadership individuals
Aaron Fulkerson
CEO
profile shot of the leadership individuals
Dr Rishabh Poddar
Co-Founder and CTO
profile shot of the leadership individuals
Imran Siddique
Chief Platform Officer
profile shot of the leadership individuals
Jared Aaker
Head of Business Development
profile shot of the leadership individuals
Miran Chun
CMO
profile shot of the leadership individuals
Prof Raluca Ada Popa
Co-Founder
profile shot of the leadership individuals
Prof Ion Stoica
Co-Founder
profile shot of the leadership individuals
Chester Leung
Co-Founder
profile shot of the leadership individuals
Prof Wenting Zheng
Co-Founder
Aaron Fulkerson
CEO
Dr Rishabh Poddar
Co-Founder and CTO
Imran Siddique
Chief Platform Officer
Jared Aaker
Head of Business Development
Miran Chun
CMO
Prof Raluca Ada Popa
Co-Founder
Prof Ion Stoica
Co-Founder
Chester Leung
Co-Founder
Prof Wenting Zheng
Co-Founder

Investors


Our Values


Our shared beliefs that guide how we show up to work and for each other.
  • 1. Customer Centricity
    Innovating relentlessly to solve customer problems efficiently.
  • 2. Empowered Ownership
    Acting swiftly, owning your role, and grasping the ‘why.’
  • 3. Intentional Learning
    Being purposeful, humble, and ever-curious.
  • 4. Mission-focused Teamwork
    Collaborating, thinking systematically, and promoting positive, open, and honest communication while staying mission-focused.
  • 5. Inclusivity and Kindness
    Operating with kindness, listening, and celebrating diversity to enrich solutions and culture.
  • 6. Joyful Engagement
    Embracing fun, creativity, and laughter to enhance innovation and team spirit, fostering a vibrant, supportive atmosphere.



Join us


AI will either connect to everything that matters — or it will stall at the edge of every system worth protecting. The difference is whether we can reliably enforce the rules that make it safe, and prove we did.

That's the movement we're building: a world where AI reaches further than ever and stays open, sovereign, and verifiable — where trust is no longer a leap of faith but something anyone can check. If you want to build that, we want to build it with you.

The reach is here. Let's make it trustworthy.

Build with us.
The standards are open — start at github.com/agentrust-io. And if you want to do this for a living, we're hiring: opaque.co/careers.