Apple said on 8 June 2026 that it is expanding Private Cloud Compute (PCC) beyond its own data centers. PCC is Apple's cloud system for Apple Intelligence tasks too complex for on-device models. For the most demanding tasks, including agentic tool use and complex reasoning, Apple worked with Google and NVIDIA to extend PCC to Google Cloud systems with NVIDIA GPUs. Apple said this is the first time its PCC privacy commitments extend to third-party data centers.[1]
Apple said PCC's core requirements are unchanged. It said the new implementation combines NVIDIA Confidential Computing on NVIDIA GPUs, Intel CPUs with Trust Domain Extensions (TDX) and Google's Titan chip.[1] NVIDIA said the next day that the deployment uses its Blackwell GPUs.[2]
To reduce the risk of supply-chain attacks, Apple says it keeps a cryptographically verifiable, append-only ledger of all Google Cloud hardware in the PCC fleet. For components that could leak user data if compromised, Apple says its software attestation is rooted in at least two roots of trust from independent vendors. An attestation is a signed record of the software a machine loaded, and a root of trust is a component trusted without further checks. Apple adds that its devices will trust only PCC software it has cryptographically approved.[1]
Apple said it would publish all binaries and give researchers public tooling and access to live PCC nodes in research mode through the Apple Security Bounty. It said PCC on Google Cloud would move gradually toward its complete set of protections during a summer preview period.[1]
As of 20 October 2026, the release notes in Apple's PCC Security Guide say a public security research program for PCC on Google Cloud will launch later this year. A known issue in the notes says Apple's research tool, pccvre, does not yet parse attestations from PCC on Google Cloud or the deployment's releases in the PCC transparency log. Apple says support will come when the program launches.[3]
Sources
Check or correct this page
Verification record
The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.
5c5ea1ed32548a7bdc56aa7de9e66253d2764f5bdb5a482b229625ccb0229906
.jpg){kind=link}