Infrastructure / Deployment

OpenPCC

Open-source framework and standard for verifiably-private AI inference, explicitly modeled on Apple's Private Cloud Compute but fully open, vendor-neutral, auditable, and self-deployable. It wraps every inference interaction (prompt, tokens, logs, telemetry) in encryption and policy so no vendor, operator, or insider can read it, combining confidential compute on commodity CPU/GPU TEEs, integrated remote attestation, tamper-proof transparency logs, an HPKE-based encrypted client-server stream, and an Oblivious-HTTP anonymization layer to defeat metadata/timing side-channels. Model- and provider-agnostic; ships Go and C client SDKs.

Apache-2.0; maintained by Confident Security (San Francisco; $5M seed). Launched Nov 5 2025; ~940 stars by mid-2026. Reference implementation in Go plus a written spec/whitepaper; related repos (twoway, ohttp, bhttp) are also Apache-2.0. Confident Security operates a commercial managed service (CONFSEC) on top of the open standard, but the standard and implementation themselves are fully open.

Openness

5 high confidence

5.0

license: Apache-2.0(OSI)
source: public(github.com/openpcc/openpcc + spec/whitepaper)
core-gated: ungated

Fully OSI-licensed (Apache-2.0) across the reference implementation and related repos, with the spec and whitepaper public. Confident Security runs a commercial managed service (CONFSEC) on top, but that is an open-core *business* around a fully open standard, not open-core licensing.

https://github.com/openpcc/openpcc recorded 2026-06-17
Apache-2.0; "open source framework for verifiably private AI inference"; OHTTP gateway, attestation, transparency log, client SDKs
https://cloudsecurityalliance.org/blog/2025/11/13/introducing-openpcc recorded 2026-06-17
defines OpenPCC as an Apache-2.0 standard for provably-confidential cloud compute; launch Nov 2025; Confident Security

Adoption

2 low confidence

2.0

Launched Nov 5 2025 with a $5M seed (Decibel, Ex/Ante, South Park Commons, Halcyon, SAIF); ~940 GitHub stars by mid-2026 (notable for a young infra project) but no production adopters documented in primary sources. Early-stage.

https://github.com/openpcc/openpcc recorded 2026-06-17
~940 stars; reference implementation

Capability

4 medium confidence

4.0

Broad, well-architected confidential-serving stack with attestation plus anonymization that goes beyond plain confidential compute. Not top because it is young with limited proven scale and no documented production adopters.

https://cloudsecurityalliance.org/blog/2025/11/13/introducing-openpcc recorded 2026-06-17
technical scope: TEE inference, attestation, transparency logs, Oblivious-HTTP anonymization, client SDKs

Unchanged since 2026-07-30 (last edited, not re-checked)