Meta said on 23 September 2026 that it is extending Private Processing to its AI glasses. Private Processing is the confidential computing infrastructure Meta introduced in 2025 for WhatsApp and the Meta AI app. The platform runs AI models inside confidential virtual machines (CVMs), which are designed to keep their memory encrypted and isolated from the host. Meta says the platform is designed so that even Meta cannot access user data. Meta named streaming transcription, contextual search and long-term recall as workloads it designed the system to offload.[1]

According to Meta, the glasses verify the server before sending any context. Over a remote attestation and TLS (RA-TLS) session, the device obtains a hardware-signed certificate from the server's trusted execution environment (TEE). It checks that the signature chains to a root key published by the chip vendor. It also checks that the measured software image matches an entry in an append-only ledger witnessed by an independent third party. If either check fails, it does not connect. To keep requests from being tied to an account, Meta says devices use anonymous credentials and reach its gateways through a third-party Oblivious HTTP (OHTTP) relay run by Fastly or Cloudflare.[1]

For memory features, Meta says it built the storage engine inside the TEE and encrypts stored data with user-provided keys. Meta says the public ledger makes tampering with deployments detectable. It adds that researchers in its security program have access to the binaries under agreement, which lets them confirm that a recorded image behaves as described. Meta is also extending its bug bounty program to Private Processing on glasses and plans to give researchers tools, CVM binaries and documentation.[1]

Trail of Bits audited the WhatsApp version before launch. In an April 2026 post, it said it found 28 issues, eight rated high severity, including attestation reports without freshness guarantees. It said Meta fixed that issue by adding a TLS nonce.[2] We cover that audit in a separate brief.

Sources

  1. Bringing Private Processing to Meta AI GlassesEngineering at Meta · 23 Sep 2026
  2. What we learned about TEE security from auditing WhatsApp's Private InferenceTrail of Bits · 7 Apr 2026

Check or correct this page

Correct
Request a correction · Edit the source on GitHub · Corrections policy
Verification record

The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.

155595527ac2b88f7d299acd0912c150adcee7b4b3fbe80f20d7d5e1b6562a17

View source · Manifest