A virtual machine with hardware memory encryption and attestation to protect data in use from infrastructure operators.