This is alpha software. Treat it that way.
Cella is early, experimental, and under active development. Things will change, break, and occasionally disappear without notice.
Run a real job and you may hit failed runs, dropped enclaves, wrong meters, downtime, or features that vanish between releases. We do not promise the service is fit for production, mission-critical, life-safety, or regulated workloads. Do not run anything you can't afford to lose, retry, or have fail.
Keep your own copy of anything you send in. Cella returns your result and tears the room down — it is not a place to store the only copy of your data, your code, or your output.
Provided as-is. No guarantees.
Cella is provided "as is" and "as available," with no warranties of any kind — express, implied, or statutory — to the fullest extent the law allows.
That includes no warranty of merchantability, fitness for a particular purpose, uptime, accuracy, throughput, or non-infringement. We don't guarantee a job will run, complete, return correct output, finish in any given time, or that the meter will be flawless. We don't guarantee the confidential substrate behaves exactly as documented — the underlying hardware and network are operated by third parties.
To the maximum extent permitted by law, Cella and its operators are not liable for lost data, lost profit, lost output, downtime, or any indirect, incidental, or consequential damage arising from use of the service. Where liability can't be excluded, it's capped at the amount you paid us for the run in question.
An honest host — not a proof.
This is the most important section. Read it slowly, because the guarantee is narrower and more honest than most "private compute" pitches.
Your workload runs inside a sealed enclave on a confidential GPU substrate. We keep no logs of your job, and we have no console, shell, or log stream into a running enclave. When a run ends the room is torn down and there's nothing retained here to read, leak, sell, or hand over. That's real, and it's the whole point.
What we do NOT do: we do not hand you a per-job cryptographic attestation or proof, and we will not pretend to. We deliberately don't use the words verifiable, provable, or attested to describe Cella, because we don't give you a certificate you can check. The guarantee here is architectural and operational — a room built with no window, run under a no-logs, no-keys policy — not a math you can independently verify.
If a posture isn't enough for your threat model, run it yourself. Cella is trust-but-don't-pretend: we tell you exactly what we can and can't see, and we don't dress an operational promise up as a cryptographic one. If your threat model demands a checkable, per-job proof — or assumes the host itself is hostile — Cella is the wrong tool, and the honest answer is to run the workload on hardware you control.
Your fingerprint is the whole account.
When you create a Cella account you're shown a fingerprint exactly once. That string is your only credential — there is no email, no password, no recovery flow.
The fingerprint authenticates every request you make as a Bearer token. We do not have a copy we can re-show you, reset, or use to identify you. Anyone holding your fingerprint can run jobs and spend your balance as you. Treat it like a private key.
- Lose it and it's gone. There is no "forgot fingerprint." A lost fingerprint means a lost account and a lost balance — we cannot recover either.
- Leak it and it's compromised. If it ends up in a screenshot, a shared terminal, or a public repo, rotate to a new account; the old balance follows the old key.
- Store it somewhere durable — a password manager or secret store — the moment it's shown. Your browser keeps it only in per-tab session storage and forgets it when the tab closes.
Paid by the second, settled in crypto.
Cella bills for the seconds your job actually computes, drawn against a balance you fund with crypto. Idle time isn't billed; the enclave scales to zero between jobs.
The meter starts when the door seals and stops when the result returns. You fund a balance by sending crypto to a deposit address tied to your account; the running cost of each job is debited from that balance. Posted prices are indicative and can change — they track a third-party confidential-compute substrate and a live crypto/USD rate, both of which move.
- Crypto payments are final. On-chain transfers can't be reversed by us. Send to the right address, on the right network, in the right asset — funds sent incorrectly may be unrecoverable.
- Balances are credit for compute, not a deposit account, an investment, or a custodial wallet. They buy you seconds of sealed compute and nothing more.
- You owe taxes and fees that apply to you. Cella does not provide tax, financial, or legal advice, and exchange-rate and network fees are yours.
- No token, no securities. This disclaimer covers the compute service only. There is no Cella token, sale, or financial instrument offered here, and nothing on this site is an offer of one.
Lawful work only.
A sealed room is not cover for illegal work. You are responsible for everything you run, even though we can't see it.
You agree to use Cella only for lawful purposes and only with workloads you have the right to run. The fact that we can't look inside the enclave does not make the enclave a haven — it makes you solely accountable for what runs there.
- No workloads that break applicable law, infringe others' rights, or violate sanctions or export controls.
- No malware, intrusion, fraud, abuse infrastructure, or attacks against others.
- No content or activity that is illegal where you are or where the compute runs.
- We can refuse or stop service we reasonably believe is unlawful or abusive — and because we keep no logs, the remedy is to cut off the account, not to surveil it.
We are not a custodian of your data.
Cella is a runtime, not a vault. We don't hold your data, your keys, or your output — and nothing is retained after a run.
Your inputs and your code exist only for the life of the job, inside the sealed enclave. When the run ends the enclave is torn down: no retained copy of your inputs, no cached output, no logs. We are not safekeeping anything on your behalf, which also means we cannot recover, re-run, or re-deliver a result once a run is gone. The flip side of "we keep nothing" is "there is nothing for us to hand back later."
Because we hold no keys and keep no logs, there is also nothing here to subpoena, leak, or sell. That's the design — but it puts the duty to retain your own copies squarely on you.
This page can change.
Cella is moving quickly, and this disclaimer will move with it.
We may update these terms, the prices, the supported GPUs, and the service itself at any time. Material changes take effect when posted here; continuing to use Cella after a change means you accept the updated terms. If a change doesn't work for you, stop using the service and withdraw any unused balance where that's available.
Questions about anything on this page? Write to hello@cella.computer. We'd rather you ask than assume.