Edgeless Systems

license

custom-source-available(audit-only)+MIT-subdirs(proxy/web/internal-oss)

source

partial(the TCB components are published and reproducibly buildable at github.com/edgelesssys/privatemode-public

service

proprietary-hosted

models

third-party-open-weight

Not open source: the security-critical Trusted Computing Base is publicly readable, and the client proxy and web app are MIT, but the main license permits only viewing and compiling for audit, and the operational service is a proprietary hosted offering. More open than a black-box API, less open than open core - the source is partial rather than either public or closed. The repository README scopes itself to "all components of Privatemode that are part of the TCB", so the operating service around them - accounts, billing, orchestration - is not published, and the LICENSE grants permission "to view, analyze, and compile this source code solely for the purpose of auditing and for verifying its reproducibility and cryptographic hashes", with redistribution, modification and any other use prohibited. There is no self-hostable implementation, so the source is not public; a real component set does ship, so it is not closed either. That is the same shape as Lumo, Apify and Confer, which sit at source-available for the same reason.

• https://github.com/edgelesssys/privatemode-public recorded 2026-06-17

  TCB source (attestation agent, proxy, web app, SDK) under a custom audit-only license with MIT-licensed subdirectories

• https://github.com/edgelesssys/privatemode-public/blob/main/README.md recorded 2026-08-12

  the repo "contains the source code of all components of Privatemode that are part of the TCB", that "the build is reproducible", and that this "allows users to fully verify the Privatemode service" - verification, not deployment

• https://github.com/edgelesssys/privatemode-public/blob/main/LICENSE recorded 2026-08-12

  permission is granted "to view, analyze, and compile this source code solely for the purpose of auditing and for verifying its reproducibility and cryptographic hashes", and "Redistribution, modification, and use of the software for any other purpose are prohibited unless explicitly permitted by the copyright holder"; privatemode-proxy/, app/web/ and internal/oss/ are additionally MIT