# TeeSQL

> Confidential PostgreSQL — encrypted in transit, at rest, and in use.

## Docs

- [Glossary](https://docs.teesql.com/concepts/glossary.md): Definitions of TeeSQL, dstack, and confidential-computing terms used across the docs.
- [Client libraries](https://docs.teesql.com/connect/client-libraries.md): TeeSQL RA-TLS client libraries for TypeScript, Python, and Rust, plus ORM integration notes.
- [Connection string](https://docs.teesql.com/connect/connection-string.md): Connection string format, roles, ports, and TLS modes for connecting to a TeeSQL cluster.
- [SSL & TLS](https://docs.teesql.com/connect/ssl-tls.md): Configure SSL for connections to a TeeSQL cluster, including the RA-TLS handshake and per-client setup.
- [Connection troubleshooting](https://docs.teesql.com/connect/troubleshooting.md): Diagnose and fix common errors when connecting to a TeeSQL cluster.
- [TeeSQL Documentation](https://docs.teesql.com/index.md): Confidential PostgreSQL — encrypted in transit, at rest, and in use.
- [What is TeeSQL?](https://docs.teesql.com/introduction.md): A managed confidential PostgreSQL database where even the operator can't read your data.
- [Quickstart](https://docs.teesql.com/quickstart.md): Create a TeeSQL database and run your first query in under 5 minutes.
- [Encryption](https://docs.teesql.com/security/encryption.md): How TeeSQL encrypts data at rest with LUKS2, in transit with mutual RA-TLS, and in use with Intel TDX memory encryption.
- [Security overview](https://docs.teesql.com/security/overview.md): How TeeSQL protects data with TDX hardware memory encryption, LUKS at rest, and mutual RA-TLS in transit.
- [Remote attestation](https://docs.teesql.com/security/remote-attestation.md): How TeeSQL cryptographically proves the database is running inside a genuine Intel TDX CVM.
- [Trusted execution environments](https://docs.teesql.com/security/tee-explainer.md): What TEEs are, how Intel TDX works, and what runs inside TeeSQL's confidential VM.
- [Verify attestation](https://docs.teesql.com/security/verify-attestation.md): Verify that your TeeSQL database is running inside a genuine TEE before — and during — every connection.