What it does.
How it protects.
Four primitives. Every deployment mode. No raw data in transit — ever.
Differential Privacy
Mathematical guarantees, not promises.
Per-sample gradient clipping with calibrated Gaussian noise injection. Privacy budget tracked across every round — ε and δ visible in real time. Moments accountant for tight composition.
Secure Aggregation
The server learns the sum. Nothing else.
Asynchronous Rounds
Slow nodes don't block fast ones.
Model Heterogeneity
Different architectures, one global signal.
How it protects.
Privacy is not a checkbox. Every Federate training run produces a signed privacy receipt — ε spent, δ bound, rounds completed, nodes that contributed. Auditable. Reproducible. Court-admissible.
Where it deploys.
Three topologies. One API. Deploy to institutional silos, edge device fleets, or mixed hierarchical networks without changing your training code.
Federate vs. the field.
Benchmarked on a 6-node cross-silo setup. CIFAR-10 proxy task, IID distribution, 64 rounds max.
| CAPABILITY | Federate | PySyft | Flower | NVIDIA FLARE |
|---|---|---|---|---|
| Differential Privacy (built-in) | ✓ | ✓ | — | — |
| Secure Aggregation | ✓ | ✓ | — | ✓ |
| Async rounds | ✓ | — | ✓ | — |
| Model heterogeneity | ✓ | — | — | — |
| Cross-device support | ✓ | — | ✓ | — |
| Cross-silo support | ✓ | ✓ | ✓ | ✓ |
| Privacy receipt / audit log | ✓ | — | — | ✓ |
| Homomorphic encryption | ✓ | ✓ | — | — |
| Framework agnostic | ✓ | — | ✓ | ✓ |
| Managed cloud option | ✓ | — | — | — |
| Convergence (rounds to 95% acc.) | 47 | 112 | 89 | 74 |
| Setup time | < 5 min | ~2 hours | ~30 min | ~3 hours |