# Trusted model providers

Some Hugging Face models require custom code provided by the model author in order to run correctly. These models require the `trust-remote-code` option during deployment.

For security and platform integrity reasons, Exoscale only allows remote code execution for a predefined list of trusted model providers.

## Why is `trust-remote-code` restricted?

When enabled, `trust-remote-code` allows model-specific Python code from a Hugging Face repository to be executed as part of the model loading process.

While many models use this mechanism legitimately, it also introduces additional security and operational considerations. To ensure a secure and reliable platform for all customers, Dedicated Inference only permits remote code execution for reviewed and approved model providers.

## Trusted Model Providers

The following Hugging Face organizations are currently approved for use with `trust-remote-code`:

- `baidu`
- `deepseek-ai`
- `huggingface`
- `ibm-granite`
- `meta-llama`
- `minimaxai`
- `mistralai`
- `moonshotai`
- `microsoft`
- `nvidia`
- `openai`
- `poolside`
- `qwen`
- `sentence-transformers`
- `stabilityai`
- `unsloth`
- `xai-org`
- `xiaomimimo`
- `zai-org`

> This list may evolve over time as additional providers are reviewed and approved.

## Requesting Additional Providers

If your model requires `trust-remote-code` and its provider is not currently approved, you can request a review by opening a support ticket in the Exoscale Portal.

Please include:

- The Hugging Face model URL
- A brief description of your use case
- Any known runtime requirements or custom dependencies

Our team will review the request and determine whether the provider can be added to the trusted-provider allowlist.

> Approval is not guaranteed and depends on security, licensing, operational, and compatibility considerations.

## Additional Runtime Requirements

Some models require more than the `trust-remote-code` option. Certain OCR, multimodal, and research-focused models depend on additional Python packages, custom decoding logic, custom logits processors, or other runtime components that are not available in the standard Dedicated Inference environment.

As a result, a model may remain unsupported even if its provider is approved for remote code execution.

## Troubleshooting

If you receive an error similar to:

```text
Parameter 'trust-remote-code' is not permitted for model '<model-name>'
```

the model provider is not currently on the trusted-provider allowlist.

To request a review of the provider, follow the process described in the [Requesting Additional Providers](#requesting-additional-providers) section.