DP‑SGD

Differentially private stochastic gradient descent — clips gradients and adds noise during training.