Harbor-1
Research, write, and analyze with leading open-weight models, encrypted end to end and run inside hardware enclaves. Harbor never trains on a private chat, and pays you for the ones you choose to share.
ChutesConfidential GPUs in hardware enclavesPartner
IBM Silver PartnerAsk it anything
Two ways to chat
0
private chats used for training
Never trained on
Harbor never trains on a private chat.
Encrypted end to end
TLS 1.3 in transit and AES-256 at rest.
Runs in an enclave
Inference happens inside hardware-attested enclaves.
Visible only to you
Neither Harbor nor the GPU operator can read it.
AES encryption at rest
Encryption in transit
Longest Earn review
Up to, per accepted chat
Under the hood
/01
TLS 1.3 in transit and AES-256 at rest. Every new chat is visible only to you.
/02
Inference runs on Chutes inside hardware-attested enclaves: Intel TDX with NVIDIA confidential computing. The enclave proves what it is running before it sees a prompt.
/03
Leading open-weight models with public, auditable weights. When a stronger one passes our evaluation, Harbor-1 switches to it.
Private by default
Contracts, medical bills, salary offers, board memos. The questions you’d never hand to Big AI stay sealed between you and the model.
How Earn works
Earn on
Size the UK market for e-bike subscriptions.
Correction added: use 2026 ONS household data.
/01
Submit an exchange
Turn on Earn and send in one exchange: your question, Harbor-1’s answer, and your correction if you have one.
In review
Day 2 of 7
/02
A person reviews it
A reviewer checks it for quality, privacy, your right to share it, and authenticity, within 7 days.
Accepted
+$1.00
Paid in USDC or Harbor API Credits
/03
Get paid
Accepted exchanges pay up to $1 each from a shared fund, in USDC or Harbor API Credits.
What separates us
Encryption
Chats travel over TLS 1.3 and are stored with AES-256. Inference runs inside hardware-attested enclaves (Intel TDX with NVIDIA confidential computing), so the GPU operator and Harbor never see a readable prompt. Each enclave proves what it is running before it receives a request.
Open weights
Harbor-1 runs on leading open-weight models whose weights are public and auditable. Your chats are never sent to a closed lab. When a stronger open model passes our evaluation, Harbor-1 switches to it, so the product keeps getting better without changing who can see your data.
Rewards
Private chats stay private. Turn on Earn and submit an exchange: a reviewer checks quality, privacy, and authenticity within 7 days, and accepted exchanges pay up to $1 in USDC or Harbor API Credits. Collect missions pay by tier, Bronze, Silver, or Gold, from a separate budget. Payment and training approval are separate decisions.
| Feature | Typical AI chat | Private AI chat | Harbor |
|---|---|---|---|
| Encrypted in transit and at rest | ● | ● | ● |
| Runs on open-weight models | – | ● | ● |
| Inference inside hardware enclaves | – | ● | ● |
| Never trains on private chats | – | ● | ● |
| Pays you for the chats you share | – | – | ● |
| Pays you to film real work | – | – | ● |
| Consent and license on every record | – | – | ● |
Every accepted exchange is reviewed, consented, and paid for. That is how Harbor-1 keeps improving.
The Free plan has a daily chat limit and no Earn. Pro, Plus, and Super add higher limits and Earn.
For daily use.
$20/ month
For professional work.
$49/ month
For full-stack access.
$99/ month
Yes. Every new chat is private and visible only to you, and Harbor never trains on a private chat. If you turn on Earn and submit an exchange, that exchange is no longer private. The rest of the conversation stays private.
Accepted exchanges pay up to $1 each, in USDC or Harbor API Credits. Review takes up to 7 days, and you are paid only after approval. Earn is on Pro, Plus, and Super, and it pauses when the reward pool is empty.
No. Passing review means you can be paid. Using your work to train a model is a separate approval.
No. Each has its own fund, and neither pays for the other.
No. You can use Harbor-1 without connecting a wallet.
Harbor-1 gives more direct answers than most chatbots, but it still declines some requests.
Encrypted, private by default, and paid when you choose to share.