Apple is pushing its private AI system beyond its own data centers for the first time, starting to run new Apple Intelligence workloads on Google Cloud. The move expands Private Cloud Compute, or PCC, from an infrastructure Apple introduced in 2024 into a broader deployment that now includes third-party data centers.
The change matters now because Apple says the expansion is beginning today and will keep ramping throughout the summer preview period, when the company’s newest AI capabilities are being put through their paces. Those workloads sit behind some of Apple Intelligence’s most demanding features, including complex reasoning and agent-like tool use, making PCC a central piece of Apple’s AI push as Tim Cook faces mounting attention on how fast Apple can deliver smarter software.
Apple says the work with Google builds on collaboration this year to use technologies behind the Gemini family of models. Those technologies helped shape the next generation of Apple Foundation Models, the systems that power Apple Intelligence features across devices and the cloud. For the most demanding tasks, Apple worked with Google and NVIDIA to extend PCC infrastructure to Google Cloud systems using NVIDIA GPUs, while keeping what it describes as the same privacy and security standards that govern its own servers.
That promise is the part Apple is asking users and researchers to trust. The company says its core PCC requirements still apply: stateless computation, enforceable guarantees, no privileged runtime access, non-targetability and verifiable transparency. The Google Cloud deployment uses NVIDIA Confidential Computing with NVIDIA GPUs, Intel CPUs with TDX and Google’s Titan chip, and Apple says devices will only trust PCC software that has been cryptographically approved by Apple. Even so, this is the first time Apple says its PCC privacy commitments have been extended beyond Apple’s own data centers.
Apple also says all binaries will be published for public inspection, and that it will offer research tooling and live PCC node access in research mode through the Apple Security Bounty Program. More technical detail is due later this month at the Confidential Computing Summit, with an update to the PCC Security Guide and research program details coming later this year. The broader question is not whether Apple can keep the system private in principle; it is how much of Apple Intelligence’s heaviest traffic will actually move onto Google Cloud during the preview period, and how quickly Apple can make that feel invisible to users.
