AI Potluck
Product / UX / UI & API

Privatemode

Edgeless Systems

Confidential-computing AI inference service from Edgeless Systems. Prompts are encrypted on the device and processed inside hardware-based Trusted Execution Environments on confidential VMs with Nvidia GPUs, so data stays encrypted during inference and the provider cannot read it; end-to-end remote attestation makes the guarantee checkable. It serves third-party open-weights models behind a chat interface and an OpenAI- and Anthropic-compatible API, aimed at regulated industries.

Privatemode runs the service and trains no models of its own. Verified 2026-08-13 via the Privatemode product site.

Openness

2 high confidence
2.0
license
custom-source-available(audit-only)+MIT-subdirs(proxy/web/internal-oss)
source
partial(the TCB components are published and reproducibly buildable at github.com/edgelesssys/privatemode-public
service
proprietary-hosted
models
third-party-open-weight

Not open source: the security-critical Trusted Computing Base is publicly readable, and the client proxy and web app are MIT, but the main license permits only viewing and compiling for audit, and the operational service is a proprietary hosted offering. More open than a black-box API, less open than open core - the source is partial rather than either public or closed. The repository README scopes itself to "all components of Privatemode that are part of the TCB", so the operating service around them - accounts, billing, orchestration - is not published, and the LICENSE grants permission "to view, analyze, and compile this source code solely for the purpose of auditing and for verifying its reproducibility and cryptographic hashes", with redistribution, modification and any other use prohibited. There is no self-hostable implementation, so the source is not public; a real component set does ship, so it is not closed either. That is the same shape as Lumo, Apify and Confer, which sit at source-available for the same reason.

  • https://github.com/edgelesssys/privatemode-public recorded 2026-06-17

    TCB source (attestation agent, proxy, web app, SDK) under a custom audit-only license with MIT-licensed subdirectories

  • https://github.com/edgelesssys/privatemode-public/blob/main/README.md recorded 2026-08-12

    the repo "contains the source code of all components of Privatemode that are part of the TCB", that "the build is reproducible", and that this "allows users to fully verify the Privatemode service" - verification, not deployment

  • https://github.com/edgelesssys/privatemode-public/blob/main/LICENSE recorded 2026-08-12

    permission is granted "to view, analyze, and compile this source code solely for the purpose of auditing and for verifying its reproducibility and cryptographic hashes", and "Redistribution, modification, and use of the software for any other purpose are prohibited unless explicitly permitted by the copyright holder"; privatemode-proxy/, app/web/ and internal/oss/ are additionally MIT

Adoption

2 low confidence
2.0

Announced Feb 18 2025; offers a free tier, pay-as-you-go, and enterprise plans, and is co-marketed with Capgemini for regulated industries, but no customer or usage numbers are published. New and unquantified.

Capability

4 medium confidence
4.0

Broad model menu plus a drop-in OpenAI-compatible API, chat UI, and strong integration story. Not top-tier because it is a confidential inference relay for others' models rather than a frontier model or full platform.

Verified 2026-08-12