A security model that protects data in use by isolating workloads in hardware-backed trusted execution environments.