How do you train medical AI on real clinical data without breaking privacy laws or trust?
Healthcare has been stuck in a paradox for years.
To build truly useful medical AI, you need real clinical data: real conversations between doctors and patients, real diagnostic reasoning, real-world context. But those same datasets are among the most sensitive in existence protected by HIPAA, GDPR, and strict ethical constraints.
As a result, teams have been forced into uncomfortable trade-offs:
- on-prem infrastructure that doesn’t scale to modern foundation models, or
- public cloud environments that require trust in providers and expose data in memory during computation.
Thanks to Super Protocol, Yma Health, NVIDIA, AMD and Google Research this trade-off was removed entirely.
The goal was ambitious: fine-tune
MedGemma 27B, a medical foundation model, on
real clinical dialogues, while ensuring that patient data could not be accessed, copied, or leaked, even by infrastructure operators.
The solution relied on
verifiable confidential computing.
Training and inference were executed inside hardware-backed Trusted Execution Environments (TEE) using NVIDIA H200 GPUs paired with AMD CPUs in SEV-SNP mode.
All clinical data was encrypted end-to-end and decrypted
only inside the secure environment. Encryption keys never existed outside the trusted boundary, and once training was complete, the environment was fully destroyed.
Crucially, this wasn’t based on promises or policies.
The entire execution environment was cryptographically attested, allowing all parties to verify that:
- the correct hardware was used,
- the expected code was running,
- no unauthorized access was possible at any stage.
The result?
Yma’s fine-tuned MedGemma 27B achieved a
9.4 / 10 recommendation score from practicing clinicians, demonstrating:
- improved clinical relevance,
- safer and more concise responses than general-purpose models,
- and near-human reasoning quality in medical scenarios.
This case shows what becomes possible when privacy is treated as an architectural property, and not a compliance checkbox.
Confidential and verifiable AI is no longer theoretical. It’s already enabling real-world medical models trained on the data that actually matters.
👉
Full case study
#ConfidentialComputing #HealthcareAI #TrustedExecutionEnvironments