Cachet
New Proof on every opinion

A second opinion nobody else can read

Upload a scan report or a lab result. It is encrypted on your device, read only inside a verified NEAR AI enclave, and you get a plain-language second reading with questions to bring to your doctor.

Ask privatelyTry a synthetic sample

$3.00 per opinion · pay from any chain · no account, no wallet

Synthetic sample · demo answer

Knee MRI review

1 file · encrypted on device · read in a TDX enclave

Mostly agrees, with notes

The report describes a mild sprain of the inner knee ligament (MCL), fluid in the joint and a small cyst behind the knee. It concludes there is no meniscus tear, but its own findings describe a pattern that radiologists often read as a tear.

Findings

  • Possible medial meniscus tear

    Findings › Menisci; Impression 2

  • Grade I MCL sprain

    Findings › Ligaments; Impression 1

Questions to bring to your doctor

  1. 1The report says the meniscus signal reaches the surface on images 11 and 12. Could this be a tear rather than degeneration?
  2. 2Does the catching I feel fit with a meniscus problem, and would that change the plan?
Reading privately · not medical advice

Not medical advice. A second reading to discuss with your doctor. It does not diagnose, and it is no substitute for a clinician who can examine you. In an emergency, call your local emergency number.

What leaves your device: nothing readable.

  1. 1

    Encrypted on your device

    Your PDF is read in the browser. Copies you keep are sealed with an AES-256 key that never leaves this device.

    WebCrypto AES-GCM · IndexedDB

  2. 2

    The enclave is checked first

    Before a byte leaves, your browser fetches Intel TDX evidence for the model with a fresh nonce and verifies it. If anything is off, nothing is sent.

    TDX quote · RTMR3 replay · nonce + key binding

  3. 3

    Only the enclave can open it

    Your document is encrypted to the key the enclave proved it holds. Our server relays ciphertext it cannot read, and the answer comes back sealed to you.

    X25519 · HKDF-SHA256 · XChaCha20-Poly1305

  4. 4

    Every answer carries a receipt

    The quote, the model hash and the enclave's signature over the exact bytes. Re-check it offline, any time, without trusting us.

    npm run verify · hashes on NEAR

“We can’t read your records. Neither can the people who run the cloud.”
What the enclave and the encryption guarantee, not a promise in a policy.
“If the enclave can’t prove itself, your file doesn’t leave.”
The check runs in your browser before every send. It fails closed.

Don’t trust us. Check the seal.

Click the seal on any answer to see the Intel TDX quote, the model hash and every check, re-run in your browser. Or download the receipt and verify it offline from a clone of the open-source repo.

$ npm run verify -- op_demoknee

✓ Gateway enclave
    ✓ Intel TDX quote signed by Intel   TCB UpToDate
    ✓ Quote binds our fresh nonce and the signing key
    ✓ Boot event log replays to RTMR3
✓ Model enclave (Qwen/Qwen3.8-27B)
    ✓ Measured configuration matches the quote
    ✓ GPU evidence carries our nonce
    ✓ Encryption key is the attested key
✓ Document was encrypted to the attested key
✓ Encrypted exchange  request and response bytes match

VERIFIED

Output of the shipped demo receipt: real enclave evidence, fixed sample answer.

$3.00

per opinion. Scan a deposit QR and pay from the chain you already use. No account, no wallet to connect.

  • USDC on Base
  • SOL on Solana
  • USDC on Arbitrum
  • ETH on Ethereum
  • BTC on Bitcoin
  • USDC on NEAR