ICP introduces TEE subnet to support secure, enterprise-grade on-chain computing

by
Alyssa Davidson

Posted: February 17, 2026 5:54 AM Updated: February 17, 2026 5:54 AM

by well

Edit and fact check date: February 17, 2026, 5:54 AM

We sometimes use automatic translation plugins to improve your local language experience. The automatic translation may not be accurate, so please read the original text for accurate information.

The Internet Computer Protocol announced that Proposal 140407 has been approved, establishing the network’s first TEE-enabled subnet and marking a significant step toward what the project describes as “hardware-based trust” for enterprise-scale blockchain adoption.

This upgrade introduces a new security model to address long-standing limitations in both cloud infrastructure and distributed networks.

The newly activated subnet launches as a cluster of seven nodes and represents a transition from software-based protection to a system where confidentiality is enforced at the hardware level. Operating in this environment for the first time on an Internet computer, Canister can run in complete confidentiality, making its internal data inaccessible not only to external observers but also to the nodes running the code.

TEE introduces hardware-based confidentiality to enable secure on-chain computing.

Trusted Execution Environments (TEEs) are designed to mitigate key vulnerabilities in traditional computing models. Under standard conditions, data must be decrypted in server memory during processing, creating moments where sensitive information can be exposed to malicious administrators or infrastructure compromised. TEEs such as AMD SEV-SNP technology implemented in this subnet isolate computation within a protected area inside the processor. This allows data to be decrypted only within the processor die, prevents the operating system or hardware owner from accessing the enclave, and allows remote attestation to verify that the code running inside has not been altered.

The introduction of TEE has already established itself as a major development for Internet computers that differentiate themselves by hosting entire applications on-chain. Until now, applications containing highly sensitive information, such as medical data, proprietary algorithms, and personal communications, required trust in decentralized node providers. TEE-based execution shifts trust requirements from the operator to the hardware itself, opening the door to a new category of enterprise and privacy use cases.

Among the applications highlighted are confidential on-chain AI models where both user input and model parameters are hidden from node operators, and enterprise deployments that must comply with strict data protection regulations such as GDPR or HIPAA. The new subnet is currently operating as a controlled test environment with 7 nodes, less than the standard 13 nodes, due to the higher security guarantees provided by TEE. Access is limited while developers gather operational experience and prepare for broader availability.

According to the project roadmap, TEE-enabled subnets are expected to become a standard option for developers. In future deployments, canisters can be launched on public or confidential TEE subnets, depending on application requirements. The upgrade is described as a fundamental step toward expanding the capabilities of Internet computers and providing a privacy-preserving environment within the broader “world computer” architecture.

As MPost’s resident journalist, Alisa specializes in the broad areas of cryptocurrencies, zero-knowledge proofs, investing, and Web3. With a keen eye for new trends and technologies, she provides comprehensive coverage to inform and engage readers about the ever-evolving digital financial landscape.

• 
  
  

more articles