Skip to content
Tinfoil logo

Tinfoil

Tinfoil is a YC Spring 2025 (P25) company. Based in San Francisco, CA, USA. Team of 3.

  • B2B
  • Security
  • Privacy
  • Cybersecurity
  • AI

About Tinfoil

GPAgent's own fund-neutral profile, written from public information. Updated Oct 5, 2026.

Summary

Tinfoil builds a confidential computing platform that lets companies run AI workloads on cloud infrastructure with cryptographically verifiable data privacy. It targets businesses handling sensitive data that need guarantees beyond contractual promises, replacing on-premises deployments, PII redaction hacks, and unenforceable "trust us" policies from cloud AI providers. The platform runs on NVIDIA Hopper and Blackwell GPUs in confidential compute mode, so neither Tinfoil nor the underlying cloud provider can access user data.

Business model

Usage-based pricing for the inference API, $20 per month for private chat and for containerized enclave deployments, plus usage fees.

Go-to-market

B2B developers and security-conscious enterprises adopt the product through a self-serve API key and an OpenAI-compatible interface, requiring no code changes to existing AI workflows; a consumer private chat app on browser and iOS runs alongside the developer offering.

From the Y Combinator listing

How Tinfoil describes itself in Y Combinator's public directory. Original listing (opens in a new tab)

Tinfoil makes your AI workflows secure, verifiable, and private.

Tinfoil makes it easy to make your AI workloads provably private, without changing your code. You get the privacy of on-prem deployments, while running on the cloud. We’ve built a full-stack platform on top of the latest NVIDIA GPUs offering confidential computing capabilities, meaning that you don’t have to tradeoff performance for privacy. Under the hood, we integrate a suite of recent advances in secure hardware technologies, in particular NVIDIA’s confidential compute mode available on Hopper and Blackwell. When combined with Tinfoil’s software stack, companies can prove their security claims rather than relying on unenforceable statements like "trust us, we don’t log your queries.” Tinfoil guarantees that all data always stays private and cannot be accessed by anyone other than the end user — not even by Tinfoil or the cloud provider it’s processed on. The founding team combines deep academic and industry experience in security and internet protocols. Tanya was previously a systems engineer at Cloudflare, where she built Internet security protocols used by billions, and contributed to the Workers AI platform. Jules and Sacha recently completed their PhDs at MIT where they worked on secure hardware and privacy-preserving technologies. Jules has also worked at NVIDIA on their confidential computing team. Nate has deep infrastructure experience, starting in high school when he built a mini-CDN that got him an internship at Cloudflare. Tinfoil was born from our personal frustration with the false choice between access to powerful AI and data privacy. As AI becomes tightly integrated into our lives and business workflows, it will touch an ever increasing amount of sensitive personal and proprietary data. Right now, the only solutions are DPAs, band-aids like PII redaction, or the nuclear option of running everything on-prem. These solutions are not scalable. By making it easy to deploy provable privacy, Tinfoil promises to unlock significantly deeper AI adoption and integrations, just as TLS on the Internet enabled e-commerce to flourish by securing credit cards on the network. If OpenAI is creating “God in a box”, we are putting God in a blackbox, so Satan can’t spy.

Facts

Industry
B2B / B2B -> Security
Location
San Francisco, CA, USA
Team size
3
Status
Active
Stage
Early

Founders (2)

Score every batch against your own thesis

GPAgent's sourcing agent reads every company in a batch, scores each one against your fund's thesis in a private workspace, and lines up the founders worth meeting before Demo Day. You decide who to contact. Your scores, notes, and pipeline never appear on these pages.

How Accelerator intelligence works