DigiCert has announced it is bringing independent trust validation to confidential computing environments, in collaboration with Google Cloud. By applying the proven principles of Public Key Infrastructure (PKI) to cloud infrastructure, DigiCert will provide cryptographic verification that cloud-hosted systems and workloads are authentic, trusted, and untampered.

As organizations move more sensitive applications, AI workloads, and critical operations to the cloud, trust in the underlying infrastructure has become a foundational requirement. Particularly in regulated industries, organizations are increasingly seeking independent attestation to validate infrastructure integrity and complement cloud provider assurances.

DigiCert’s role introduces this independent layer of trust verification. Acting as a neutral third-party root of trust, DigiCert uses cryptographic signatures, certificates, and identity validation to independently attest that workloads and computing environments hosted in Google Cloud are operating even more transparently.

Developed through a year-long collaboration between DigiCert and Google Cloud, the service establishes a new trust model for the confidential computing ecosystem that enables independent verification of cloud infrastructure complementing provider attestation.

“As organizations handle increasingly sensitive data, the demand for multi-layered infrastructure assurance has grown,” said Amit Sinha, CEO of DigiCert. “For decades, PKI has enabled trusted interactions across the internet. We are now extending those same trust principles to confidential computing and cloud infrastructure.”

The initiative builds on the growing adoption of confidential computing, which protects data while it is actively being processed by isolating workloads in secure hardware-based environments. DigiCert’s independent attestation capabilities strengthen this model by enabling organizations to verify the integrity and authenticity of the infrastructure itself.

By combining Google Cloud’s confidential computing capabilities with DigiCert’s expertise in PKI and digital trust, organizations gain:

• Independent cryptographic verification of workloads and infrastructure
• Stronger assurance that systems have not been modified or tampered with
• A common root of trust across distributed cloud environments
• Greater transparency and confidence for regulated and security-sensitive workloads

“Confidential computing is built on the principle that customers should be able to verify the integrity of their workloads,” said Nelly Porter, Director of Product Management, Google Cloud Confidential Computing and Encryption. “By collaborating with DigiCert on independent attestation, we’re extending that principle and providing customers with an additional layer of assurance for sensitive cloud workloads.”