AI Potluck
Product / UX / UI & API

Confer

Confer Labs

End-to-end encrypted AI chat assistant from Confer Labs (founded by Moxie Marlinspike, creator of Signal) whose core claim is that the operator cannot read, train on, or hand over your conversations. Prompts are encrypted on-device and sent via Noise-protocol pipes into a Trusted Execution Environment on a confidential VM, processed by open source LLMs, then re-encrypted before leaving; chat history is encrypted with passkey-derived keys. The differentiator is cryptographically enforced, verifiable privacy backed by remote attestation, reproducible builds, and an append-only transparency log.

Confer publishes its inference/proxy stack and reproducible confidential-VM image (vLLM-based) openly for verifiability, but NEITHER repo carries a LICENSE file (GitHub reports no declared license), and the end-user client app is not public - so despite "open source" marketing the accurate classification is source-available. The service is not self-hostable; its security model depends on Confer's attestation infrastructure. Repos created Dec 2025.

Openness

2 high confidence
2.0
license
none-declared(no LICENSE file in either public repo)
source
partial(confer-proxy + confer-image public,client-app private)
self-host
no(depends on vendor attestation infra)
models
open source(undisclosed)

Marketed as open source, but neither public repo declares any license (GitHub reports license:null), so re-use rights are undefined, and the end-user client is not public. Source is published for verifiability/reproducible builds, not for self-deployment. Accurate classification is source-available, not open_source.

Adoption

2 low confidence
2.0

Young product (repos created Dec 2025, launched late 2025/early 2026); ~70-75 stars per repo and a reported partnership "bringing foundational AI privacy to Meta", but no user/usage numbers. Notability is driven mainly by the founder's reputation.

  • https://confer.to/blog/ recorded 2026-06-17

    product positioning and feature timeline (memory, encrypted folders, connectors, Meta partnership)

Capability

3 medium confidence
3.0

Strong, genuinely novel on the privacy/crypto dimension, but a relatively standard chat feature set, no self-hosting, and undisclosed models cap it at mid-tier.

Unchanged since 2026-06-24 (last edited, not re-checked)