Apple keeping its cloud AI processing inside its own data centers was never just a technical preference. It was a promise, and a fairly specific one. Private Cloud Compute launched in 2024 on the premise that nobody, including Apple itself, could read what users sent to be processed. Extending that to Google Cloud infrastructure required proving the promise could travel.
The answer Apple landed on involves Nvidia Blackwell GPUs running Confidential Computing, a hardware-based approach that isolates workloads during processing so that even the infrastructure hosting them cannot access the data inside. Before anything sensitive leaves a device, that device can cryptographically confirm the infrastructure has not been tampered with. The math has to check out first. Only then does data move.
Intel CPUs with TDX and Google’s Titan chip round out the hardware side of the expanded setup. Apple described the architecture in its blog post as following many of the same security patterns as the original Private Cloud Compute on Apple silicon. The software control stays entirely with Apple regardless of where the servers physically sit. Apple devices will only trust code that Apple has cryptographically signed off on, full stop.
The workloads driving this expansion sit at the demanding end of what Apple Foundation Models handle. Agentic tool use and complex reasoning tasks need more headroom than Apple’s existing data center footprint comfortably provides, and Google Cloud fills that gap.
The Google relationship has been building quietly for a while now. Apple started training AI models on Google’s TPU chips in 2024. A multi-year agreement signed in January 2026 brought Google’s AI models and cloud into the picture for consumer devices. Conversations about Google infrastructure supporting the next version of Siri surfaced in March 2026. Apple also happens to be Google Cloud’s largest individual storage customer by most estimates, a detail that rarely makes headlines but says something about how deeply the two companies already depend on each other.
The expanded Private Cloud Compute currently runs in preview. The full security protections will follow gradually rather than all at once, which suggests Apple is being careful about how quickly it opens the door it spent years promising to keep closed.
