CoreWeave, Inc., The Essential Cloud for AI, has announced the CoreWeave Zero Trust AI Framework, a customer-controlled security model that gives customers authority over access to their models, data, and runtime environments. Unveiled at NVIDIA GTC Berlin, the framework lets customers bring the security systems they already operate to CoreWeave Cloud rather than rebuilding around a provider-defined security model.
CoreWeave has launched the Zero Trust AI Framework, a customer-controlled security model for access to models, data and runtime environments.
The framework brings together six layers of protection, from encryption keys to runtime.
Zero Key Access uses Remote Key Encryption so customers retain control of keys protecting their data at rest.
Zero Node Access makes provider access an explicit customer decision through Support Access Management.
Zero In-Use Access intends to extend NVIDIA's third-generation Confidential Computing across CPUs, GPUs and the NVLink fabric, including on NVIDIA HGX Rubin NVL8, coming to CoreWeave Cloud in Q4 2026.
Zero Model Data means CoreWeave does not use customer prompts, training data, model weights or outputs to train its own models.
"Security for AI workloads cannot rest on a provider's promises about its own behavior," said Chen Goldberg, executive vice president of product and engineering at CoreWeave. "Our customers are running their most valuable models against their most sensitive data. They should not have to take our word for how we handle either. The Zero Trust AI Framework replaces assurances with architecture, so the controls that matter stay in the customer's hands."
"As enterprises move increasingly sensitive and regulated data into AI workflows, zero trust must extend beyond identity and network security to the entire AI infrastructure stack," said Dave McCarthy, group vice president, Cloud and Datacenters, Enterprise Infrastructure, IDC. "CoreWeave's Zero Trust AI Framework addresses this requirement by giving customers control over encryption keys and administrative access while introducing verifiable infrastructure, confidential execution, protected data movement, and customer data controls that do not rely on using customer data to train or improve the cloud provider's own AI models. This shifts trust from provider promises to technical controls, a critical step for enterprises deploying proprietary AI at scale."
Agentic AI has changed what enterprises need from cloud security. As agents retrieve context, call tools, and trigger actions across other systems, sensitive data no longer sits behind a single application boundary. It moves through prompts, embeddings, weights, traces, outputs, and runtime systems.
The framework brings together six layers of protection:
Zero Key Access: With Remote Key Encryption, customers use keys from the key infrastructure they already operate, whether a software key manager, a hardware security module, or a KMS in another cloud.
Zero Node Access: Support Access Management makes provider access an explicit customer decision. Customers authorize access for a defined operational need rather than treating it as always available.
Zero Trust Infrastructure: CoreWeave attestation services allow the infrastructure executing a workload to be verified using hardware roots of trust, which can also drive automated trust decisions.
Zero In-Use Access: CoreWeave intends to extend NVIDIA's third-generation Confidential Computing across CPUs, GPUs, and the NVIDIA NVLink fabric, including on NVIDIA HGX Rubin NVL8. CoreWeave also intends to support the NVIDIA OpenShell Reference Architecture.
Zero Model Data: As an AI cloud, not a competing model provider, CoreWeave does not use customer prompts, training data, model weights, or outputs to train or improve its own models.
Zero Trust Network Encryption: CoreWeave uses IEEE 802.1AE MACsec to encrypt data moving across its backbone.
Together, these six controls minimize CoreWeave's role in the customer trust chain. Rather than depending on policy statements or operational assurances, customers can rely on architecture that limits access, verifies infrastructure, separates responsibilities, and preserves ownership.
CoreWeave consistently delivers industry-leading performance, demonstrated by record-breaking MLPerf benchmark results in inference and training, and its position as the only AI cloud to earn the SemiAnalysis ClusterMAX Platinum ranking three times in a row.
About CoreWeave
CoreWeave is The Essential Cloud for AI. Built for pioneers by pioneers, CoreWeave delivers a fully integrated platform of technology and teams that enables innovators to move at the pace of innovation, building and scaling AI with confidence. Trusted by 9 of the 10 leading foundation model providers, CoreWeave serves as a force multiplier by combining superior infrastructure performance with deep technical expertise to accelerate human discovery. Established in 2017, CoreWeave completed its public listing on Nasdaq (CRWV) in March 2025.
