Edgeless Systems

license

custom-source-available(audit-only)+MIT-subdirs(proxy/web/internal-oss)

source

partial(the TCB components are published and reproducibly buildable at github.com/edgelesssys/privatemode-public

service

proprietary-hosted

models

third-party-open-weight

Privatemode publishes the components that make up its Trusted Computing Base, including the attestation agent and proxy, as a reproducible build. The main license permits only viewing and compiling the code to audit it and prohibits redistribution, modification and other use; only privatemode-proxy/, chat/ and internal/oss/ are also MIT. The hosted service around them, accounts, billing and orchestration, is not published.

• https://cdn.jsdelivr.net/gh/edgelesssys/privatemode-public@main/LICENSE recorded 2026-09-29

  The LICENSE file grants permission "to view, analyze, and compile this source code solely for the purpose of auditing and for verifying its reproducibility and cryptographic hashes", says "Redistribution, modification, and use of the software for any other purpose are prohibited unless explicitly permitted by the copyright holder", and adds that the code under "privatemode-proxy/", "chat/", and "internal/oss/" is additionally MIT.

• https://cdn.jsdelivr.net/gh/edgelesssys/privatemode-public@main/README.md recorded 2026-09-29

  The README says the repository holds the source of the components that are part of the TCB, that "The build is reproducible", and that users are "allowed to inspect the code and build it for auditing and verification purposes".

• https://github.com/edgelesssys/privatemode-public recorded 2026-06-17

  TCB source (attestation agent, proxy, web app, SDK) under a custom audit-only license with MIT-licensed subdirectories

• https://github.com/edgelesssys/privatemode-public/blob/main/LICENSE recorded 2026-08-12

  permission is granted "to view, analyze, and compile this source code solely for the purpose of auditing and for verifying its reproducibility and cryptographic hashes", and "Redistribution, modification, and use of the software for any other purpose are prohibited unless explicitly permitted by the copyright holder"; privatemode-proxy/, app/web/ and internal/oss/ are additionally MIT

• https://github.com/edgelesssys/privatemode-public/blob/main/README.md recorded 2026-08-12

  the repo "contains the source code of all components of Privatemode that are part of the TCB", that "the build is reproducible", and that this "allows users to fully verify the Privatemode service" - verification, not deployment

Announced Feb 18 2025; offers a free tier, pay-as-you-go, and enterprise plans, and is co-marketed with Capgemini for regulated industries, but no customer or usage numbers are published. New and unquantified.

• https://www.edgeless.systems/blog/what-is-privatemode recorded 2026-08-13

  launch date (Feb 18 2025); Edgeless Systems as maker; confidential-inference positioning

Broad model menu plus a drop-in OpenAI-compatible API, chat UI, and strong integration story. Not top-tier because it is a confidential inference relay for others' models rather than a frontier model or full platform.

• https://docs.privatemode.ai/cookbook/coding-assistants recorded 2026-09-29

  The coding-assistants page says "Privatemode enables AI‑assisted coding on sensitive codebases that you can't share with public AI services." and lists Claude Code, OpenCode, Visual Studio Code and JetBrains IDEs as tested environments.

• https://docs.privatemode.ai/models/overview recorded 2026-09-29

  The models page lists chat, OCR, embedding and speech-to-text models ("qwen3-embedding-4b", "whisper-large-v3", "gpt-oss-120b"), and says "Privatemode gives you access to the following models."

• https://docs.privatemode.ai/security/attestation/overview recorded 2026-09-29

  The attestation page describes the client-side proxy verifying "hardware-signed evidence" against reference values before any key is released, with a further GPU report for AI workers.

• https://www.privatemode.ai recorded 2026-09-29

  The home page offers a chat entry ("Start chatting"), a coding entry ("Install coding agent") and a JavaScript client example calling the API, under the heading "Running on open frontier AI models"; its integrations list names OpenClaw, n8n, AnythingLLM, GPT4All and PrivateGPT.