A Secure Enclave SiP (SE-SiP) is disclosed. The SE-SiP provides all the security benefits of a system designed using a Trusted Platform Module (TPM), replaces the need to trust a general-purpose CPU chip vendor with the need to trust a much simpler more trustworthy configurable device, and replaces the need to trust the entire system motherboard manufacturer with the much more limited need to trust the SE-SiP manufacturer. It can provide privacy for the software and data sent to the system, resident on it, or retrieved from it, with respect to all parties—including the person/party in physical possession of the device.