emtech-confidential-compute

Overview

This repository showcases Avanade's exploration with Confidential Computing on Azure, built around a document annotation scenario.

Licensing

emtech-confidential-compute is available under the MIT Licence.

Solutions Referenced

• Azure Confidential Ledger
• Confidential computing nodes on Azure Kubernetes service
• Azure Form Recognizer

Architecure

A high level Architecture of the proposed solution

This demonstrates how to use Azure confidential ledger to annotate a document while preserving the confidentiality of the document contents, checking people are authorised to access the documents, and processing in main memory. We explore how Microsoft’s Form recogniser can be run in a TEE, and utilise services like SQL Ledger and Azre Confidential Ledger to securely track all of the data.

Documentation

The docs folder contains more detailed documentation.

Feel free to contact the team on Twitter, either Chris or Fergus. For bugs, please raise an issue on GitHub.

Contributing

Contributions are welcome. See information on contributing, as well as our code of conduct.