Apple announces that its Private Cloud Compute architecture now extends to third-party hardware, specifically Google's servers, using Nvidia, Intel, and Google security technologies to maintain privacy guarantees for advanced AI models like AFM 3 Cloud Pro.
<p>CUPERTINO, California—Apple announced earlier this year that its long-delayed Siri upgrade, announced this week as "Siri AI," would use <a href="https://arstechnica.com/apple/2026/01/apple-says-its-new-ai-powered-siri-will-use-googles-gemini-language-models/">Google's Gemini language models</a>. What the company confirmed at its Worldwide Developers Conference yesterday was that it also ran on Nvidia hardware installed in Google servers. But the company is still making the same privacy promises it did before, when all of its AI models were either running locally on your devices or on Apple-controlled server hardware.</p>
<p>For years, Apple has touted user privacy as a key benefit of using its platforms. Its cloud services use encryption that's intended to keep other people—including Apple employees—from being able to gain access to it. And the company has long advertised its use of on-device processing for things like scanning images, keeping as much data as possible from leaving your device in the first place.</p>
<p>But with Apple Intelligence, Apple has run up against the limits of its own hardware. The kinds of language and reasoning models that can run locally on an iPhone or Mac are relatively small, limiting their capabilities and accuracy. Apple's <a href="https://security.apple.com/blog/private-cloud-compute/">Private Cloud Compute</a> system was a partial solution but relied on Apple's own server hardware; to get the kind of capacity it would need to support Siri AI, Apple would have had to commit to a huge data center buildout that it has <a href="https://www.thealgorithmicbridge.com/p/what-apple-knows-about-ai-that-silicon">so far avoided</a>.</p><p><a href="https://arstechnica.com/apple/2026/06/apple-says-its-ai-is-still-private-even-when-its-running-on-googles-servers/">Read full article</a></p>
<p><a href="https://arstechnica.com/apple/2026/06/apple-says-its-ai-is-still-private-even-when-its-running-on-googles-servers/#comments">Comments</a></p>
# Apple says its AI is still private, even when it's running on Google's servers
Source: [https://arstechnica.com/apple/2026/06/apple-says-its-ai-is-still-private-even-when-its-running-on-googles-servers/](https://arstechnica.com/apple/2026/06/apple-says-its-ai-is-still-private-even-when-its-running-on-googles-servers/)
## Taking Private Cloud Compute on the road
[](https://cdn.arstechnica.net/wp-content/uploads/2026/06/IMG_8103.jpeg)
Federighi outlines the high\-level architecture of its new Apple Intelligence capabilities\.
Credit: Andrew Cunningham
Federighi outlines the high\-level architecture of its new Apple Intelligence capabilities\.Credit: Andrew Cunningham
“This is the amount of the Google system we use, which is none,” says Federighi, standing in front of a blank slide in a much more intimate theater than the giant outdoor auditorium where he had introduced CEO Tim Cook a couple of hours before\.
Federighi has just outlined a “traditional chatbot architecture”—a client app running on your device that reaches out to cloud\-based models running on third\-party servers\. Those models can then reach out to Google Search or something similar “to \[ground themselves\] in world knowledge\.”
Apple’s system still depends on an on\-device model for simpler queries\.[In this year’s OS releases](https://machinelearning.apple.com/research/introducing-third-generation-of-apple-foundation-models), most Apple Intelligence devices get AFM 3 Core, a new Gemini\-based model co\-developed by Google and Apple\. Newer devices with at least 12GB of RAM and a relatively recent chip \(M3 and newer for Macs, M4 and newer for iPads, just the A19 Pro for iPhones\) use AFM 3 Core Advanced instead, which leverages the extra hardware as well as your device’s storage to function \(it’s used to improve dictation and power Siri’s more expressive voice\)\.
For “more sophisticated” questions, your device will contact cloud\-based models, again co\-developed by Apple and Google: a general\-use model called AFM 3 Cloud, an image\-generation model called ADM 3 Cloud, and an advanced model called AFM 3 Cloud Pro for “agentic tool use and complex reasoning\.” The first two models, Apple says, still run on Apple’s silicon on Apple’s servers\. The Cloud Pro model is the one running on Google\-owned Nvidia hardware\.
To do this while still making the same privacy promises, Apple has introduced a new iteration of Private Cloud Compute, this one designed to run on third\-party hardware\. Apple is using[Nvidia’s Confidential Computing](https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/),[Intel’s Trust Domain Extensions](https://www.intel.com/content/www/us/en/developer/tools/trust-domain-extensions/overview.html), and[Google’s Titan security chip](https://docs.cloud.google.com/docs/security/titan-hardware-chip)to provide layers of protection similar to what Apple provides for its own servers\. To provide additional protection, Apple keeps “a cryptographically verifiable, append\-only ledger of all Google Cloud hardware that is part of the PCC fleet,” and Apple’s devices will only trust software on these servers that is signed by Apple\.
NVIDIA's Confidential Computing, using Blackwell GPUs, is being adopted by Apple to expand its Private Cloud Compute to Google Cloud, enabling secure server-side inference for Apple Intelligence features while maintaining strong privacy guarantees.
Apple announced a major overhaul of its Apple Intelligence platform, revealing a new AI architecture built on foundation models co-developed with Google using Gemini technologies, enabling multimodal capabilities and privacy-preserving on-device and server processing via Private Cloud Compute.
Apple's AI strategy relies on its privacy promises to differentiate itself, but partnerships with Google and Nvidia for cloud AI introduce potential vulnerabilities that could undermine that trust.
Apple released Core AI, a new framework that runs AI models entirely on Apple silicon devices (iPhone, iPad, Mac, Vision Pro) with zero server calls. It includes a memory-safe Swift API, model export recipes for PyTorch, an optimizer, and debugging tools, supporting models like Qwen, Mistral, and SAM3.