Blyss
Blyss, formerly known as Spiral, is a B2B security company based in San Francisco, offering a confidential LLM API that ensures interactions are unmonitorable by anyone, including Blyss itself.
Services
Blyss provides a confidential LLM API aimed at ensuring user interactions with models are unmonitorable by anyone, including Blyss itself. The API, accessible at enclave.blyss.dev, utilizes advanced hardware features from NVIDIA GPUs and AMD CPUs to establish secure environments for data interactions. This service is designed to offer public verifiability of its claims.
Security and Compliance
Blyss employs AMD SEV-SNP and NVIDIA's Confidential Computing mode to create hardware roots of trust, ensuring data security and confidentiality. The company also utilizes dm-verity kernel features to verify the integrity of the OS and application code. By combining all attestation data into a JSON file available at a fixed URL, Blyss offers transparent and publicly verifiable security measures. They request TLS certificates from Let's Encrypt, allowing external observers to cross-reference various security elements to verify the integrity of the VM environment.
Technology Stack
Blyss leverages cutting-edge technology, including the latest NVIDIA GPUs and AMD CPUs, to create secure environments for its LLM API. The company builds VMs containing the model and associated code, publishing the build steps, final disk image, hash, and expected SEV-SNP measurement. This detailed documentation and process transparency enable external audits and verifications, reinforcing user privacy and system security.
History and Evolution
Blyss, originally known as Spiral, has evolved to become a key player in the B2B security sub-industry. The company participated in the Y-Combinator W23 batch and maintains a small team of two. Blyss operates from San Francisco, CA, USA, and offers remote working options. It aims to build a robust technical and organizational infrastructure to improve user privacy and autonomy through transparent and verifiable security practices.