Loading…
Venue: Courtyard clear filter
Tuesday, June 23
 

9:00am PDT

Keynote: Welcome - Nelly Porter, Director of Product Management, GCP Confidential Computing and Encryption, Google
Tuesday June 23, 2026 9:00am - 9:05am PDT

Speakers
avatar for Nelly Porter

Nelly Porter

Director of Product Management, GCP Confidential Computing and Encryption, Google

Tuesday June 23, 2026 9:00am - 9:05am PDT
Courtyard

9:05am PDT

Keynote: Welcome - Jim Zemlin, Executive Director, The Linux Foundation
Tuesday June 23, 2026 9:05am - 9:10am PDT

Tuesday June 23, 2026 9:05am - 9:10am PDT
Courtyard

9:10am PDT

Keynote: Welcome Address - Aaron Fulkerson, Chief Executive Officer, OPAQUE
Tuesday June 23, 2026 9:10am - 9:20am PDT

Speakers
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Tuesday June 23, 2026 9:10am - 9:20am PDT
Courtyard

9:20am PDT

Keynote: Attested, Transparent, Sovereign: The Evolution of Confidential Computing - Mark Russinovich, CTO, Deputy CISO and Technical Fellow, Microsoft Azure, Microsoft
Tuesday June 23, 2026 9:20am - 9:40am PDT
Over the past decade, Microsoft has helped move confidential computing from research into real-world cloud infrastructure, platforms, and services. In this keynote, Mark will trace that evolution through the expanding promises of confidential computing, from protecting individual workloads to enabling verifiable trust across entire systems. He will share examples from Microsoft’s adoption journey and discuss the next frontier: confidential sovereignty, where organizations can verify code, enforce policy, and retain control across compute, networking, and software supply chains.

Speakers
avatar for Mark Russinovich

Mark Russinovich

CTO, Deputy CISO and Technical Fellow, Microsoft Azure, Microsoft
Mark Russinovich is CTO, Deputy CISO, and Technical Fellow for Microsoft Azure, Microsoft’s global enterprise-grade cloud platform. A widely recognized expert in distributed systems, operating systems and cybersecurity, Mark earned a Ph.D. in computer engineering from Carnegie Mellon... Read More →
Tuesday June 23, 2026 9:20am - 9:40am PDT
Courtyard
  Keynote Sessions
  • Slides Attached Yes

9:40am PDT

Keynote: Future-Proofing Confidential AI - Nelly Porter, Director of Product Management, GCP Confidential Computing and Encryption, Google & Anand Pashupathy, VP /& GM, Intel Product Assurance & Security, Intel
Tuesday June 23, 2026 9:40am - 10:00am PDT
As confidential computing becomes the baseline for secure AI, the focus shifts to defending against emerging threats and accelerating complex, hardware-intensive workloads. This session details Google Cloud’s latest architectural advancements in Confidential AI. We will explore the technical integration of post-quantum cryptography (PQC) key management and the expansion of trusted execution environments (TEEs) across both CPUs and GPUs. Join us to understand the underlying infrastructure that enables the processing of highly sensitive data and the training of proprietary models with cryptographic assurance, protecting high-value AI assets against both current and horizon attack vectors.
Speakers
avatar for Anand Pashupathy

Anand Pashupathy

Vice President and General Manager Intel Product Assurance and Security, Intel
Anand Pashupathy is an Intel Vice President and Intel Product Assurance and Security General Manager responsible for the Intel’s Product Security and Confidential Compute roadmaps, implementation and operationalization of proactive security and risk-prioritized measures, security... Read More →
avatar for Nelly Porter

Nelly Porter

Director of Product Management, GCP Confidential Computing and Encryption, Google

Tuesday June 23, 2026 9:40am - 10:00am PDT
Courtyard

10:00am PDT

Keynote: Protecting Data in The Agentic AI Era - Hugo Romero, Corporate Vice President, Product Security, AMD
Tuesday June 23, 2026 10:00am - 10:20am PDT
As AI shifts from answering chat questions to acting across sensitive data, tools, APIs, and workflows, we are entering the Agentic AI era, where confidential computing becomes essential to establishing trust at runtime. This keynote explores how AMD is advancing hardware-rooted protection for agentic AI through AMD SEV, enabling protected and attestable execution in production cloud infrastructure. The session will examine how runtime evidence, policy enforcement, and ecosystem deployment patterns can help make agentic AI practical for sensitive enterprise and cloud environments. It will also look ahead to how confidential AI continues to evolve across platforms, accelerators, and open standards.
Speakers
avatar for Hugo Romero

Hugo Romero

Corporate Vice President, Product Security, AMD
Hugo Romero is Corporate Vice President of the Product Security Office at AMD, where he leads AMD’s end-to-end product security strategy across hardware and software. In this role, he drives security across SoC Security Architecture, Confidential Computing, Root of Trust, Security... Read More →
Tuesday June 23, 2026 10:00am - 10:20am PDT
Courtyard

10:35am PDT

Keynote: Agentic AI Is Running Your Infrastructure. Who's Accountable When It Goes Wrong? - Mike Bursell, Executive Director, Confidential Computing Consortium
Tuesday June 23, 2026 10:35am - 10:55am PDT
Agentic AI is already inside every enterprise. It's making decisions, accessing tools, and touching sensitive infrastructure autonomously, and most organizations have no idea whether their security posture was built to handle it.
This keynote cuts through the noise to give enterprise leaders a clear picture of what's actually at risk when AI agents operate at scale: the threat surfaces that emerge, the gaps in traditional defenses that vulnerabilities in the latest tools have already exposed, and the architectural shift required to stay ahead.
You'll leave with a concrete understanding of where your current security stack is likely falling short, why Confidential Computing's hardware-rooted trust model is becoming the standard for agentic AI deployment, and what your organization needs to prioritize before speed of adoption becomes a liability.
Hosted by the Confidential Computing Consortium, this session is designed for executives who are done waiting for security to catch up and ready to build AI infrastructure that's secure by design, from silicon to cloud.
Speakers
avatar for Mike Bursell

Mike Bursell

Executive Director, Confidential Computing Consortium
ike Bursell is the Executive Director of the Confidential Computing Consortium. He is one of the co-founders of the Enarx project (https://enarx.dev), and was CEO and co-founder of Profian, a start-up based on Enarx. He has previously served on the Governing Boards of the CCC and... Read More →
Tuesday June 23, 2026 10:35am - 10:55am PDT
Courtyard

10:55am PDT

Keynote: Trustworthy AI with Confidential Computing - Dr. Najwa Aaraj, CEO, Technology Innovation Institute (TII)
Tuesday June 23, 2026 10:55am - 11:15am PDT

Speakers
avatar for Dr. Najwa Aaraj

Dr. Najwa Aaraj

CEO, Technology Innovation Institute (TII)
Dr. Najwa Aaraj is the Chief Executive Officer (CEO) at the Technology Innovation Institute (TII), the applied research pillar of the Advanced Technology Research Council (ATRC), the overarching advanced technology body in Abu Dhabi responsible for driving research and development... Read More →
Tuesday June 23, 2026 10:55am - 11:15am PDT
Courtyard

11:15am PDT

Keynote Panel: The Sovereign Stack: Nations, Enterprises & the Demand for Verifiable AI - Hugo Romero, AMD; Najwa Aaraj, TII; Mark Russinovich, Microsoft; Nelly Porter, Google; Mike Bursell, CCC
Tuesday June 23, 2026 11:15am - 11:45am PDT
The race to deploy AI agents has exposed a fundamental gap in what “sovereign AI” actually means. Localized hosting and domestic ownership are no longer enough for true sovereignty. As nations and enterprises deploy AI at scale across sensitive infrastructure and distributed systems, the question is no longer whether they want sovereign AI, but whether they can prove it. True sovereignty requires verifiable answers to four questions: what code ran, where it ran, who operated it, and what rules were enforced. This keynote panel convenes leaders across the full sovereign stack, including silicon, cloud, and frontier model labs, to examine why hardware-enforced verifiability has become the cornerstone of production-grade sovereign AI deployments. The conversation will explore how hyperscalers, frontier model labs, and sovereign platforms are shaping trusted AI infrastructure, and why Confidential AI is now the foundational layer for compliance, IP protection, governance, and verifiable sovereignty. Because without proof of sovereignty, you have nothing.
Moderators
avatar for Frederic Lardinois

Frederic Lardinois

Sr. Editor, AI, The New Stack

Speakers
avatar for Nelly Porter

Nelly Porter

Director of Product Management, GCP Confidential Computing and Encryption, Google

avatar for Mike Bursell

Mike Bursell

Executive Director, Confidential Computing Consortium
ike Bursell is the Executive Director of the Confidential Computing Consortium. He is one of the co-founders of the Enarx project (https://enarx.dev), and was CEO and co-founder of Profian, a start-up based on Enarx. He has previously served on the Governing Boards of the CCC and... Read More →
avatar for Mark Russinovich

Mark Russinovich

CTO, Deputy CISO and Technical Fellow, Microsoft Azure, Microsoft
Mark Russinovich is CTO, Deputy CISO, and Technical Fellow for Microsoft Azure, Microsoft’s global enterprise-grade cloud platform. A widely recognized expert in distributed systems, operating systems and cybersecurity, Mark earned a Ph.D. in computer engineering from Carnegie Mellon... Read More →
avatar for Hugo Romero

Hugo Romero

Corporate Vice President, Product Security, AMD
Hugo Romero is Corporate Vice President of the Product Security Office at AMD, where he leads AMD’s end-to-end product security strategy across hardware and software. In this role, he drives security across SoC Security Architecture, Confidential Computing, Root of Trust, Security... Read More →
avatar for Dr. Najwa Aaraj

Dr. Najwa Aaraj

CEO, Technology Innovation Institute (TII)
Dr. Najwa Aaraj is the Chief Executive Officer (CEO) at the Technology Innovation Institute (TII), the applied research pillar of the Advanced Technology Research Council (ATRC), the overarching advanced technology body in Abu Dhabi responsible for driving research and development... Read More →
Tuesday June 23, 2026 11:15am - 11:45am PDT
Courtyard

12:45pm PDT

Securing the Future with Azure Confidential Computing - Run Cai & Ashutosh Chickerur, Microsoft
Tuesday June 23, 2026 12:45pm - 1:10pm PDT
Confidential computing is becoming a critical foundation for cloud security in an era defined by AI acceleration, data sovereignty requirements, and rising expectations for end-to-end protection of sensitive workloads. Azure is advancing this space with new infrastructure, stronger platform protections, and innovations designed to make confidential workloads more resilient, scalable, and production ready. This session will highlight the latest Azure Confidential Computing developments, including v6 confidential VMs on AMD and Intel, expanded Azure regional availability, and continued progress in production readiness. We will also look ahead to live migration for confidential VMs, including a live demo, and discuss how this capability improves workload continuity during planned security updates and unexpected hardware events. In addition, we will explore future investments acrossenclaves, platform attestation, and confidential AI. Topics include nested virtualization to enable confidential enclaves, stronger platform attestation with recovery capabilities, protection of Azure trusted computing base services, and the growing need for confidential GPUs to secure prompts, model weights, and distributed inference workloads for modern AI applications at scale.
Speakers
avatar for Run Cai

Run Cai

Principal PM Manager, Microsoft
Run Cai is a Principal TPM Manager at Microsoft, leading large-scale Azure infrastructure and focusing on confidential computing programs. She is shaping future generations of Azure confidential computing platforms, driving product scale-out and elasticity while championing new initiatives... Read More →
AC

Ashutosh Chickerur

Principal Engineering Manager, Microsoft
Ashutosh Chickerur is a Principal Software Engineering Manager at Microsoft, leading Azure confidential computing and cloud infrastructure efforts, with deep expertise in multi-cloud platforms, security, and large-scale distributed systems.
Tuesday June 23, 2026 12:45pm - 1:10pm PDT
Courtyard

1:15pm PDT

Strictly Confidential: Use Cases & Demos of AI Workflows in TEEs - Sam Lugani & Ranjit Narjala, Google
Tuesday June 23, 2026 1:15pm - 1:40pm PDT
This session dives deeper into practical implementation and use cases for confidential computing. As complex AI models demand robust cryptographic roots of trust, we will demonstrate precisely how to architect and execute these environments in the real world. Through a series of live, hands-on demonstrations, we will showcase the latest confidential platforms in action, seamlessly extending trusted execution environments (TEEs) from model training all the way through to inference. Join us to look under the hood at the exact mechanisms and architectures that allow leading Google Cloud customers to secure complex AI workflows and keep active processing encrypted at scale.

Speakers
avatar for Sam Lugani

Sam Lugani

Product Lead, Confidential Computing, Google Cloud
Sam Lugani is the product lead for Confidential Computing and Confidential AI at Google. Sam started his professional career working as a software engineer at Cisco before venturing into product centric roles at FireEye, Synack and later at Google. He completed his MS in Computer... Read More →
avatar for Ranjit Narjala

Ranjit Narjala

Google Cloud, Engineering Lead, Confidential Computing,

Tuesday June 23, 2026 1:15pm - 1:40pm PDT
Courtyard

1:45pm PDT

Panel Discussion: Proof in Production: Customer Lessons from Confidential AI - Reshma Shetty, ServiceNow; Shyam Menon, Mitek Systems; Nikhil Gulati, Johnson & Johnson; & James Edwards, Midland Credit Management
Tuesday June 23, 2026 1:45pm - 2:10pm PDT
Enterprises in regulated sectors face a stark reality: AI agents offer transformative potential, but the risk of sensitive data bleeding beyond governed boundaries remains unacceptable for many compliance and security teams. Organizations can no longer rely on black-box AI systems or accept the risk of uncontrolled data exposure, unverifiable execution, or AI workflows that outpace governance. As AI adoption accelerates, trust has become the bottleneck, and auditors are demanding verifiable proof. This panel brings together enterprise leaders navigating the real-world challenge of deploying AI in environments where compliance is non-negotiable. Panelists will share how they are balancing innovation with operational control, meeting the demands of governance teams and regulators, and building the verifiable guardrails needed to move from pilot to production. The discussion will explore why Confidential AI is becoming foundational for enterprises that need to operationalize AI without compromising governance, auditability, or trust.
Moderators
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Speakers
avatar for Shyam Menon

Shyam Menon

Senior Director of Product- Machine Learning & Fraud, Mitek Systems


avatar for Nikhil Gulati

Nikhil Gulati

Global Head, Engineering & AI, Polyphonic, Johnson & Johnson

avatar for James Edwards

James Edwards

Senior Director, IT, Midland Credit Management

avatar for Reshma Shetty

Reshma Shetty

Senior Director of Engineering, ServiceNow

Tuesday June 23, 2026 1:45pm - 2:10pm PDT
Courtyard

2:15pm PDT

Panel Discussion: State of the Union: Confidential AI From the Field - Moderated by Aaron Fulkerson, OPAQUE
Tuesday June 23, 2026 2:15pm - 2:45pm PDT
Confidential AI is moving rapidly from experimentation to production. Across industries, enterprises are demanding secure, verifiable AI infrastructure for sensitive workloads, regulated data, and autonomous agents. Leaders from across the ecosystem share a State of the Union from the field: where Confidential AI is gaining traction, what's driving demand, emerging use cases, deployment challenges, and the infrastructure requirements shaping the next wave — plus what it actually takes to move from pilot to production over the next 12 months.
Moderators
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Speakers
avatar for Nelly Porter

Nelly Porter

Director of Product Management, GCP Confidential Computing and Encryption, Google

avatar for Jonathan Dotan

Jonathan Dotan

Founder & CEO, EQTY Lab
EQTY Lab builds tools to reinvent trust in AI. As a serial founder, Jonathan has spent over 25 years navigating the intersection of technology and governance as a C-suite leader, investor, and researcher. He is also the founding director of The Starling Lab at Stanford University... Read More →
avatar for Antoine Delignat-Lavaud

Antoine Delignat-Lavaud

Principal Researcher, Microsoft
avatar for Harold Gilkey

Harold Gilkey

Director, Product Security Office, AMD
Harold Gilkey is a Director in AMD's Product Security Office, with a particular focus on confidential computing. He works across architecture, product, and engineering teams to extend hardware-rooted trust from silicon through the software stack, building on AMD's confidential computing... Read More →
avatar for Dr. Chaouki Kasmi

Dr. Chaouki Kasmi

Technology Innovation Institute, Chief Innovation Officer
Dr. Chaouki Kasmi is the Chief Innovation Officer at the Technology Innovation Institute (TII), is a cutting-edge UAE-based scientific research center. In his role, Dr. Kasmi spearheads the development and implementation of productization and industrialization strategies while overseeing... Read More →
Tuesday June 23, 2026 2:15pm - 2:45pm PDT
Courtyard

3:00pm PDT

NVIDIA Confidential Computing Attestation for Next-Generation AI Hardware - Rob Nertney & Spencer Gilson, NVIDIA
Tuesday June 23, 2026 3:00pm - 3:25pm PDT
NVIDIA's attestation infrastructure was born from Confidential Computing - securing Hopper GPUs with hardware-rooted, in-band attestation. As AI hardware evolves to rack-scale systems like Vera Rubin NVL72, attestation must evolve with it: new devices, new modes, and new challenges.

This talk covers three dimensions of that evolution. First, we discuss how CC attestation scales to rack-level with Vera Rubin, including NVIDIA's multi-node solution for CC and the challenge of attesting dozens of GPUs, CPUs, and NVSwitches as a unified trusted system. Second, we show how attestation patterns proven in CC are extending to new modes and device types - including fleet intelligence and out-of-band attestation. Third, we share the standards and interoperability challenges we have encountered along the way: inconsistent implementations across the ecosystem, gaps in attestation policy standards, and binding discrete components into trusted subsystems to prevent relay and substitution attacks.

Attendees will leave understanding where NVIDIA attestation is heading and what we have learned about the open problems the ecosystem must solve together.
Speakers
avatar for Rob Nertney

Rob Nertney

Principal software architect, NVIDIA, NVIDIA
Rob Nertney is a principal software architect for confidential computing. He has spent nearly 15 years architecting the features and deployment of accelerator hardware into hyperscale environments for both internal and external use by developers. He has several patents in processor... Read More →
avatar for Spencer Gilson

Spencer Gilson

Senior Systems Software Engineer, NVIDIA
Spencer is a senior system software engineer working on attestation at NVIDIA. He specializes in designing, developing, and maintaining critical services with an emphasis on security and reliability.
Tuesday June 23, 2026 3:00pm - 3:25pm PDT
Courtyard

3:30pm PDT

GKE Hypercluster: Kubernetes TEEs for AI at Scale - Komei Nakamoto & Keith Moyer, Google
Tuesday June 23, 2026 3:30pm - 3:55pm PDT
GKE Hypercluster brings large-scale operation of Trusted Execution Environments to Kubernetes, and was co-designed with Anthropic to meet their security and scale. In this talk we explain the linked runner architecture that drastically reduces the Trusted Compute Base (TCB) by completely separating high-value workload execution from the standard container orchestration control plane. In this model, sensitive AI workloads are offloaded to a dedicated, “sealed” virtual machine. The Kubernetes scheduling and orchestration remains on a non-sealed "parent" node, preserving Kubernetes primitives (ie. Pods, Network Policy) and operational familiarity while achieving workload isolation. The execution environment is built on a hardened and attested OS, removing non-essential services and preventing administrative shell access. Integrity is guaranteed through attestation and container signature verification.

This design establishes a strict chain of trust, offers isolation from the Kubernetes operator and Cloud Service Provider, supports high-performance AI accelerators within the sealed boundary, and enhances scalability by managing isolated environments with a reduced system footprint.
Speakers
avatar for Keith Moyer

Keith Moyer

Technical Lead, Confidential Computing, Google
Keith Moyer is the Technical Lead for Confidential Computing at Google Cloud. He has spent the last 10 years dedicated to making verifiable trust accessible and useful, with over 20 years of experience spanning cloud security and embedded systems. He holds a BS in Computer Engineering... Read More →
avatar for Komei Nakamoto

Komei Nakamoto

GKE AI Security Tech Lead, Google
Komei is a software engineer at Google, and the Tech Lead for the GKE AI Security team focused on making GKE a secure platform for running AI workloads.
Tuesday June 23, 2026 3:30pm - 3:55pm PDT
Courtyard
  Breakout Sessions
  • Slides Attached Yes

4:00pm PDT

Governing AI Agents at the Hardware Boundary - Imran Siddique, OPAQUE Systems
Tuesday June 23, 2026 4:00pm - 4:25pm PDT
AI agents are making real decisions: filing tickets, moving money, deploying code, operating infrastructure. The question is no longer what the agent should do. The question is: can you prove governance was actually enforced?

Right now, all agent governance is software. Policy engines, identity checks, audit logs, credentials: everything lives in the same trust boundary as the agent itself. If someone compromises the runtime, every control disappears. Policies get bypassed. Credentials get exfiltrated. Audit logs get forged.
Software governance makes promises. Hardware governance provides proofs.

I will walk through what my team has built (the Agent Governance Toolkit), where the software limits are, and how TEE-backed enforcement closes those gaps. Concrete architecture, real code, honest gap analysis.
Speakers
avatar for Imran Siddique

Imran Siddique

Chief Platform Officer, Opaque Systems
Imran Siddique is Chief Platform Officer at Opaque Systems and the creator of the Agent Governance Toolkit.Imran holds 20+ patents in AI systems, data platforms, and sustainability infrastructure, and has published research papers on agentic architecture and distributed systems... Read More →
Tuesday June 23, 2026 4:00pm - 4:25pm PDT
Courtyard

4:30pm PDT

Wrap-Up Session Panel Discussion: Sovereign AI - Sripriya Srinivasan, IBM; Dr. Najwa Aaraj, TII
Tuesday June 23, 2026 4:30pm - 5:00pm PDT

Moderators
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Speakers
avatar for Dr. Najwa Aaraj

Dr. Najwa Aaraj

CEO, Technology Innovation Institute (TII)
Dr. Najwa Aaraj is the Chief Executive Officer (CEO) at the Technology Innovation Institute (TII), the applied research pillar of the Advanced Technology Research Council (ATRC), the overarching advanced technology body in Abu Dhabi responsible for driving research and development... Read More →
avatar for Sripriya Srinivasan

Sripriya Srinivasan

General Manager, IBM Software Products (Core & ALM), Software Support & SRE, IBM

Tuesday June 23, 2026 4:30pm - 5:00pm PDT
Courtyard

5:00pm PDT

Wrap-Up Session Panel Discussion: Quick Takes - Anand Kashyap, Fortanix; Marvin Tong, Phala Network; and Erica Brescia, Redpoint
Tuesday June 23, 2026 5:00pm - 5:20pm PDT

Moderators
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Speakers
avatar for Erica Brescia

Erica Brescia

Managing Director, Redpoint

avatar for Anand Kashyap

Anand Kashyap

Co-Founder and CEO of Fortanix, Fortanix
Anand Kashyap is a co-founder and CEO of Fortanix, where he pioneered the application of confidential computing in data security and AI._x000D_ _x000D_ Before Fortanix, he worked at Arkin (acquired by VMware) and Symantec Research Labs, where he filed over 25 patents in networking... Read More →
avatar for Marvin Tong

Marvin Tong

Co-founder, Phala Network
Tuesday June 23, 2026 5:00pm - 5:20pm PDT
Courtyard

5:20pm PDT

Wrap-Up Session: Closing Remarks
Tuesday June 23, 2026 5:20pm - 5:30pm PDT

Speakers
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Tuesday June 23, 2026 5:20pm - 5:30pm PDT
Courtyard
 
Wednesday, June 24
 

9:00am PDT

Keynote: Welcome Back - Aaron Fulkerson, Chief Executive Officer, OPAQUE
Wednesday June 24, 2026 9:00am - 9:10am PDT

Speakers
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Wednesday June 24, 2026 9:00am - 9:10am PDT
Courtyard

9:10am PDT

Keynote: The Evolution of Apple Private Cloud Compute - Ivan Krstić, Vice President, Apple Security Engineering and Architecture (SEAR)
Wednesday June 24, 2026 9:10am - 9:40am PDT

Speakers
avatar for Ivan Krstić

Ivan Krstić

Vice President, Apple Security Engineering and Architecture (SEAR), Apple

Wednesday June 24, 2026 9:10am - 9:40am PDT
Courtyard

9:40am PDT

Keynote: The Defender Advantage Has a Single Point of Failure - Jason Clinton, Deputy CISO, Anthropic
Wednesday June 24, 2026 9:40am - 10:00am PDT
We are 2–5 years from a world where software stops shipping security bugs, because every CI/CD pipeline runs a Mythos-class model. That is the permanent defender advantage. The whole thesis rests on a single artifact: the weights of that model. If those weights leak, the advantage inverts overnight. If access to them can't be relied upon, the world routes around us to open weights. Confidential computing is the control that protects the control.
Speakers
avatar for Jason Clinton

Jason Clinton

Deputy CISO, Anthropic
Wednesday June 24, 2026 9:40am - 10:00am PDT
Courtyard
  Keynote Sessions
  • Slides Attached Yes

10:00am PDT

Keynote: Privacy at the Hardware Level: Why the Stack Has to Change Before the Rules Can - Brittany Kaiser, CEO, Alpha Compute
Wednesday June 24, 2026 10:00am - 10:20am PDT
Regulation follows architecture. Until now, data privacy has been a policy question. Confidential computing makes it a hardware guarantee. Brittany Kaiser, CEO of Alpha Compute, explores how sovereign AI infrastructure, enforced at the silicon level, changes the accountability equation for enterprises and nation-states alike. She draws on Alpha Compute’s work with institutions running sensitive workloads inside sealed, verifiable enclaves, and makes the case that the agentic AI era demands a new foundation, not a patch on the old one.
Speakers
avatar for Brittany Kaiser

Brittany Kaiser

CEO, Alpha Compute Corp
Brittany Kaiser is Chief Executive Officer of Alpha Compute Corp. (Nasdaq: ALP), where she leads strategy in confidential computing, data sovereignty, and AI infrastructure. A globally recognized authority on data rights, digital assets, and AI governance, she became a leading voice... Read More →
Wednesday June 24, 2026 10:00am - 10:20am PDT
Courtyard
  Keynote Sessions
  • Slides Attached Yes

10:35am PDT

Keynote: Monique Dumais, Senior Vice President & CIO, Encore Capital Group
Wednesday June 24, 2026 10:35am - 10:55am PDT

Speakers
avatar for Monique Dumais

Monique Dumais

CIO, Encore Capital Group
Monique Dumais joined Encore Capital Group® in 2019 and serves as Senior Vice President, Chief Information Officer for Encore Capital Group and Midland Credit Management. In this role, Ms. Dumais is responsible for enabling the business to achieve its goals by delivering strategic... Read More →
Wednesday June 24, 2026 10:35am - 10:55am PDT
Courtyard
  Keynote Sessions
  • Slides Attached Yes

10:55am PDT

Keynote: Ion Stoica, Professor, UC Berkeley, Co-Founder and Executive Chairman, Databricks and Anyscale, Co-Founder and Board Member, OPAQUE
Wednesday June 24, 2026 10:55am - 11:15am PDT

Speakers
avatar for Ion Stoica

Ion Stoica

Professor, UC Berkeley
Ion Stoica is a Professor in the EECS Department and holds the Xu Bao Chancellor Chair at the University of California at Berkeley, the Director of Sky Computing Lab, and the Executive Chairman of Databricks and Anyscale. He is currently doing research on AI systems and cloud computing... Read More →
Wednesday June 24, 2026 10:55am - 11:15am PDT
Courtyard
  Keynote Sessions
  • Slides Attached Yes

11:15am PDT

Keynote Panel Discussion: Three Forces Making Confidential AI A Mandate - Monique Dumais, Encore Capital Group; Jason Clinton, Anthropic; Brittany Kaiser, Alpha Compute; Ion Stoica, Professor, Sky Computing Lab, OPAQUE; & Jason Hiner,
Wednesday June 24, 2026 11:15am - 11:45am PDT
Three forces are accelerating demand for verifiable AI trust and turning Confidential AI from a should into a must. First, Mythos-class models and their successors make it probable that a malicious actor can place itself inside your environment. The agent is the attack surface. Second, current agent architectures are data-leaky. An employee touching the data is one problem. A malicious agent is another. In regulated industries, neither is acceptable. Third, new regulations require runtime proof — what ran, where, under what rules — automated, hardware-signed, third-party-verifiable. The EU AI Act Article 12 enforcement hits August 2, 2026; sovereign-AI rules across the Gulf, EU, India, and Singapore stack behind it. This panel explores what it actually takes to govern agentic AI in high-stakes environments: the architectural requirements, the compliance obligations, and the organizational shifts that make Confidential AI not just defensible, but mandatory.

Speakers
avatar for Jason Hiner

Jason Hiner

Chief Content Officer and Editor-in-Chief, The Deep View
Jason Hiner is the Chief Content Officer and Editor-in-Chief of The Deep View. He's an award-winning journalist who has spent his career analyzing how tech has reshaped the world. He covered AI for over a decade at ZDNET and CNET and watched it evolve from research labs to enterprise... Read More →
avatar for Brittany Kaiser

Brittany Kaiser

CEO, Alpha Compute Corp
Brittany Kaiser is Chief Executive Officer of Alpha Compute Corp. (Nasdaq: ALP), where she leads strategy in confidential computing, data sovereignty, and AI infrastructure. A globally recognized authority on data rights, digital assets, and AI governance, she became a leading voice... Read More →
avatar for Ion Stoica

Ion Stoica

Professor, UC Berkeley
Ion Stoica is a Professor in the EECS Department and holds the Xu Bao Chancellor Chair at the University of California at Berkeley, the Director of Sky Computing Lab, and the Executive Chairman of Databricks and Anyscale. He is currently doing research on AI systems and cloud computing... Read More →
avatar for Monique Dumais

Monique Dumais

CIO, Encore Capital Group
Monique Dumais joined Encore Capital Group® in 2019 and serves as Senior Vice President, Chief Information Officer for Encore Capital Group and Midland Credit Management. In this role, Ms. Dumais is responsible for enabling the business to achieve its goals by delivering strategic... Read More →
avatar for Jason Clinton

Jason Clinton

Deputy CISO, Anthropic
Wednesday June 24, 2026 11:15am - 11:45am PDT
Courtyard

12:45pm PDT

PetalGuard, A Privacy-preserving Federated Learning Framework - Victor Sucasas, TII
Wednesday June 24, 2026 12:45pm - 1:10pm PDT


Speakers
avatar for Victor Sucasas

Victor Sucasas

Senior Director, TII
Dr. Victor Sucasas is a cryptography engineer and researcher specializing in privacy-preserving technologies, confidential computing, and secure AI systems. He is Senior Director Cryptography at Technology Innovation Institute in Abu Dhabi, where he leads the Privacy Enhancing Technologies... Read More →
Wednesday June 24, 2026 12:45pm - 1:10pm PDT
Courtyard
  Breakout Sessions
  • Slides Attached Yes

1:15pm PDT

Building Trusted AI Factories with NVIDIA Accelerated Confidential Computing - Erik Bohnhorst, NVIDIA
Wednesday June 24, 2026 1:15pm - 1:40pm PDT
As AI transitions from experimentation to production, securing sensitive data, proprietary models, prompts, and agentic workflows is critical. To build trusted AI systems that scale effectively, confidential computing has emerged as a fundamental pillar, ensuring that governance, control, and privacy remain intact.
The session will cover hardware-rooted trust, workload isolation, attestation, secure runtimes, and practical implementation patterns using NVIDIA reference architectures. Attendees will come away with a clear view of how to apply confidential AI in real-world deployments, including regulated workloads, secure multi-party collaboration, and production-ready agentic systems.

Speakers
EB

Erik Bohnhorst

NVIDIA, Director of Product Management
Erik Bohnhorst is a Director of Product Management at NVIDIA, specialized in building infrastructure software that powers modern AI. Erik has been at NVIDIA since 2014, and focuses on making AI workloads run effortlessly, efficiently, and securely on Kubernetes and virtualized p... Read More →
Wednesday June 24, 2026 1:15pm - 1:40pm PDT
Courtyard

1:45pm PDT

Confidential Computing for Sovereign AI: The Emerging Opportunity in Japan - Takeharu Kondo & Shuzo Ueki, Acompany Co., Ltd.
Wednesday June 24, 2026 1:45pm - 2:10pm PDT
As generative AI and AI agents rapidly evolve, interest in Sovereign AI is growing worldwide. In Japan, demand is increasing for trusted AI infrastructure across sectors such as defense, healthcare, manufacturing, telecommunications, and critical infrastructure. This session introduces the latest trends in Sovereign AI and Confidential Computing (CC) in Japan.
Japan is advancing Confidential Computing enabled data centers, secure data collaboration platforms, and privacy-preserving AI environments. Expectations are also growing for CC adoption in government-led projects and critical infrastructure sectors.

In this session, we discuss the opportunities surrounding Sovereign AI in Japan for AI model providers, cloud providers, GPU vendors, and data center operators. Through real-world examples, we explore how CC is becoming a core technology for building Trusted AI Infrastructure in the AI agent era.

Speakers
avatar for Shuzo Ueki

Shuzo Ueki

CFO, Acompany Co., Ltd.
Shuzo Ueki is CFO of Acompany Co., Ltd., where he oversees finance, business development, and strategic partnerships. He has experience in strategy consulting, venture capital, corporate carve-outs, and startup financing, and has advised companies across multiple industries on business... Read More →
avatar for Takeharu Kondo

Takeharu Kondo

Co-founder / Chief Research and Development Officer, Acompany Co., Ltd.
Takeharu Kondo is Co-founder and Chief R&D Officer of Acompany, a Japanese startup building Confidential AI — AI you can trust with your most sensitive data. Since co-founding the company in 2018, he has led applied R&D that turns Confidential Computing and privacy-enhancing technologies... Read More →
Wednesday June 24, 2026 1:45pm - 2:10pm PDT
Courtyard
  Breakout Sessions
  • Slides Attached Yes

2:15pm PDT

Regulatory Panel Discussion: Brittany Kaiser, Alpha Compute; Mark Bower, Anjuna; & Moderated by Aaron Fulkerson, OPAQUE Systems
Wednesday June 24, 2026 2:15pm - 2:45pm PDT


Moderators
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Speakers
avatar for Brittany Kaiser

Brittany Kaiser

CEO, Alpha Compute Corp
Brittany Kaiser is Chief Executive Officer of Alpha Compute Corp. (Nasdaq: ALP), where she leads strategy in confidential computing, data sovereignty, and AI infrastructure. A globally recognized authority on data rights, digital assets, and AI governance, she became a leading voice... Read More →
avatar for Mark Bower

Mark Bower

Chief Strategy Officer, Anjuna Security.
Mark Bower is a data security expert with 20+ years shaping how the world protects information. He's led breakthroughs in data protection, privacy, and risk reduction across the U.S., Australia, U.K., and EU. At Anjuna, he drives confidential computing strategy for the future of AI... Read More →
Wednesday June 24, 2026 2:15pm - 2:45pm PDT
Courtyard

3:00pm PDT

Q-Day Survival Guide: What the Post-quantum Cryptography Transition Means for Confidential Computing - Arthur Savage, Red Hat
Wednesday June 24, 2026 3:00pm - 3:25pm PDT
Cryptographic algorithms will one day be broken by large quantum computers, necessitating the replacement of classical cryptography (like RSA) with post-quantum cryptography (PQC). This event, called Q-day, is a rolling deadline with previous estimates falling around 2035. However, in early 2026, many groundbreaking developments rapidly shortened Q-day estimates to 2030 or sooner, leaving little time to execute this unprecedented global cryptographic overhaul.

This talk will put Q-day in context for the audience: timelines, the recent scientific breakthroughs and how they alter threat models in open source, and which gaps and blockers are most pressing. Then, we view these blockers through the lens of confidential computing, from hardware to software. We will discuss current risks and best practices, then open the audience to discussion of the needs of diverse applications across the confidential computing ecosystem. This talk is both informative and information-gathering, fostering mutual understanding and collaboration to integrate PQC before time runs out. This talk will be technical, but no prior knowledge about PQC is necessary and we welcome participation from all.
Speakers
avatar for Arthur Savage

Arthur Savage

Software Engineer, Red Hat
Arthur Savage is a software engineer at Red Hat with a passion for cybersecurity. He has a Master's degree in Electrical and Computer Engineering with specialties in data analytics, image forensics, and post quantum cryptography.
Wednesday June 24, 2026 3:00pm - 3:25pm PDT
Courtyard
  Breakout Sessions
  • Slides Attached Yes

3:30pm PDT

WhatsApp Private Processing - Kevin Hui, Yunqi Li, Elizabeth Li, Henry Wang & Varun Patil, Meta
Wednesday June 24, 2026 3:30pm - 3:55pm PDT
WhatsApp (Meta) launched its flagship Confidential Computing use-case last year (https://engineering.fb.com/2025/04/29/security/whatsapp-private-processing-ai-tools/), introducing one of the first large-scale applications of confidential computing. In this presentation, we will go over an overview of how Private Processing works, the operational lessons we learned while deploying confidential virtual machines at the scale of WhatsApp, and where we think the evolution of our Private Processing stack will take us for years to come.

Topics:
- CVM hardening
- Binary transparency
- OHTTP
- Remote Attestation TLS (RA-TLS)
- Debugging CVMs in production
- Virtual Research Environment
- And others
Speakers
avatar for Elizabeth Li

Elizabeth Li

Tech Program Manager, Meta
Elizabeth manages the Private Compute Program at Meta. She is responsible for leading the Private Compute Platform Team to build the platform foundation, including Confidential Virtual Machine(CVM) & Communication, CVM & Host Transparency, Developer experiences improvement,  and... Read More →
avatar for Henry Wang

Henry Wang

SWE, Meta
N/A.
avatar for Kevin Hui

Kevin Hui

Software Engineer, Meta
Kevin works on the Private Compute Platform team at Meta. This team is responsible for the infrastructure surrounding Private Processing and other privacy-preserving products at Meta leveraging Trusted Execution Environments.

Kevin focuses on the build tooling and virtualization aspects of Confidential Virtual Machines, enabling developers at Meta to write privacy-first products without having to worry about the low-level details surrounding confidential computing... Read More →
avatar for Varun Patil

Varun Patil

Research Scientist, Meta Platforms Inc
Varun is a researcher at Meta building Private Processing, WhatsApp's secure and private AI inference platform powered by trusted execution.
avatar for Yunqi Li

Yunqi Li

Research Scientist, Meta
Yunqi works on the WhatsApp Server Privacy team, where they contribute to core messaging systems and privacy-focused technologies including Trusted Execution Environments (TEE), Binary Transparency, and Audit Transparency.

At the intersection of systems engineering and applied... Read More →
Wednesday June 24, 2026 3:30pm - 3:55pm PDT
Courtyard

4:00pm PDT

Overview of the AWS Nitro System: Building Trust Through Secure Cloud Infrastructure - Matthew Wilson, Amazon
Wednesday June 24, 2026 4:00pm - 4:25pm PDT
The AWS Nitro System is the foundation for modern Amazon EC2 instances that enables AWS to innovate faster, reduce cost for customers, and deliver added benefits like increased security and new instance types. We've applied formal methods to the Nitro System since day one. AWS has reimagined our virtualization infrastructure. Traditionally, hypervisors protect physical hardware and BIOS, virtualize CPU, storage, and networking, and provide management capabilities. The Nitro System breaks apart those functions, offloads them to dedicated hardware and software, and reduces costs by delivering nearly all server resources to instances.

This session explores the architecture and security model of the Nitro System, demonstrating how offloading virtualization functions minimizes the hypervisor attack surface and enables features like secure boot and Nitro Enclaves. We'll introduce the Nitro Isolation Engine, where we've applied formal methods. Starting from proving correctness properties of early boot firmware and the API endpoint component of the Nitro Controller, the Nitro Isolation Engine is a minimal trusted computing base and is a default capability of AWS Graviton5 processors
Speakers
avatar for Matthew Wilson

Matthew Wilson

Vice President/Distinguished Engineer at Amazon, Amazon
Matt Wilson is a Vice President and Distinguished Engineer at Amazon Web Services. He leads the technical architecture of the Amazon Software Development Experience (ASBX) division, which owns secure software development lifecycle tools and processes. Matt was a lead designer of the... Read More →
Wednesday June 24, 2026 4:00pm - 4:25pm PDT
Courtyard
  Breakout Sessions
  • Slides Attached Yes

4:30pm PDT

Keynote: Closing & Wrap-Up
Wednesday June 24, 2026 4:30pm - 5:30pm PDT

Speakers
avatar for Brittany Kaiser

Brittany Kaiser

CEO, Alpha Compute Corp
Brittany Kaiser is Chief Executive Officer of Alpha Compute Corp. (Nasdaq: ALP), where she leads strategy in confidential computing, data sovereignty, and AI infrastructure. A globally recognized authority on data rights, digital assets, and AI governance, she became a leading voice... Read More →
avatar for Aaron Fulkerson

Aaron Fulkerson

OPAQUE, CEO

Wednesday June 24, 2026 4:30pm - 5:30pm PDT
Courtyard
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience
  • Slides Attached
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.