The overview of PUMA’s workflow. ➀ Model provider secret-shares the model among the computing parties. ➁ Client generates the input-ids for the input file, secret-share the input-ids, and sends the shares to computing parties. ➂ The servers process and evaluate the model on input-ids securely using 3-party protocols. ➃ The servers return results’ shares to the client, who performs reconstruction