> ## Documentation Index
> Fetch the complete documentation index at: https://protocol.crunchdao.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Security and Model Protection

> How the Crunch Protocol protects submitted models and Coordinator data using TEE, MPC, and other privacy-preserving techniques.

Protecting model intellectual property and Coordinator data is a core requirement of the protocol.
Crunchers need confidence that their model code stays private. Coordinators need assurance that
sensitive data is handled securely.

The Crunch Protocol addresses this through a layered security approach:

* **Network-level** — the [Secure Model Protocol](/core-concepts/access-control) encrypts all
  communication and authenticates both parties via mTLS and on-chain identity
* **Execution-level** — models run in isolated containers with no direct code access; only
  API-based inference is exposed
* **Hardware-level** — Trusted Execution Environments (TEE) and Multi-Party Computation (MPC)
  provide additional guarantees for the most sensitive use cases

## Trusted Execution Environments (TEE)

In cooperation with [Phala Network](https://phala.network), Model Runners can run inside Trusted
Execution Environments. TEEs provide hardware-enforced isolation — even the infrastructure operator
cannot inspect the model code or data inside the enclave.

This ensures:

* Model code is encrypted at rest and in transit
* Inference happens inside a tamper-proof enclave
* The Coordinator can verify the enclave's integrity via remote attestation

<Frame caption="TEE architecture: models run inside hardware-secured enclaves">
  <img src="https://mintcdn.com/crunch/SXUNMLddud6Hexuk/images/tee.png?fit=max&auto=format&n=SXUNMLddud6Hexuk&q=85&s=ba987040186896677cd0c9e1a8ceb85e" alt="Diagram showing how Model Runners execute inside TEE enclaves with encrypted model code and remote attestation" width="1121" height="919" data-path="images/tee.png" />
</Frame>

## Multi-Party Computation (MPC)

In cooperation with [Arcium](http://arcium.com/), the protocol is exploring Multi-Party Computation
for scenarios where even the model runner should not see the full input data. MPC splits
computation across multiple parties so that no single party has access to both the model and the
data in cleartext.

This is particularly relevant for:

* Competitions using proprietary enterprise data
* Healthcare and financial use cases with regulatory requirements
* Scenarios where Coordinators want to protect raw data from model authors

<Frame caption="MPC architecture: computation is split across parties so no single node sees the full picture">
  <img src="https://mintcdn.com/crunch/SXUNMLddud6Hexuk/images/mpc.png?fit=max&auto=format&n=SXUNMLddud6Hexuk&q=85&s=a3c92212563579ef1d33d576cbfbb735" alt="Diagram showing Multi-Party Computation with data split across nodes for privacy-preserving inference" width="788" height="444" data-path="images/mpc.png" />
</Frame>

<Card title="Next: Tournament Hub" icon="arrow-right" href="/core-concepts/tournament-hub">
  Where participants discover and join your competition.
</Card>
