RedPill - Confidential AI You Can Verify

One gateway to every private model

RedPill puts verified TEE providers behind one OpenAI-compatible API, with one price list and one way to verify every response.

Private models

GPU models from Phala, Tinfoil, NEAR AI, Chutes, and new verified providers, without rebuilding your app for each network.

TEE-secured gateway

Requests pass through a gateway running in a trusted execution environment, with encrypted paths for prompts and responses.

One price per token

Unified token prices across providers. Pay as you go, no minimum spend.

Unified verification

Gateway attestation, provider verification, and signed receipts follow one workflow for every provider.

Two ways to start building

Call the OpenAI-compatible API from your application, or connect your agents through the Private AI Proxy desktop app.

import OpenAI from "openai";

const client = new OpenAI({
  baseURL: "https://tee.redpill.ai/v1",
  apiKey: process.env.REDPILL_API_KEY,
});

const response = await client.chat.completions.create({
  model: "openai/gpt-oss-120b",
  messages: [{ role: "user", content: "Say hello." }],
});

For applications

Point your OpenAI SDK at the Gateway. Chat, completions, and embeddings work unchanged.

Get API Key

Private AI Proxy desktop application overview

For agents

Connect Claude Code, Codex, Pi, and more through Private AI Proxy. Traffic is protected while a verified session is active.

Private AI Model Catalog

Verified TEE providers, one price per token, no minimum spend.

Jared Palmer: Kev 4BNewBeta

Kev 4B is an open-weight System One model from Jared Palmer, fine-tuned from Qwen3.5 4B Base. It makes fast, structured decisions for software: given a state and typed questions, it returns calibrated answers instead of text, as a yes/no probability (noul), a pick among options (choice), or a level on a scale (score). Call it through POST /v1/systemone, compatible with the TypeSafe SDK; it does not serve chat. Served on Phala in a TDX-attested enclave with an 8,192-token context.

Oct 13, 2026
8,192 context
$0.042/M input
$0.00/M output

Phala: Qwen3.8 27B Uncensored (Aggressive)New

HauhauCS Qwen3.8-27B Uncensored Aggressive, using the pinned Q8_K_P GGUF and BF16 vision projector. Served with SGLang on a Phala TDX-attested H200, with text and image input and a 262144-token context.

Sep 16, 2026
262K context
$0.30/M input
$1.50/M output
$0.05/M cache read

Qwen: Qwen3.8 27BBeta

Qwen3.8 27B is an open-weight dense vision-language model from Qwen. It is suited for coding, professional workflows, research, multimodal interaction, and long-running agent tasks, with flexible thinking that can be enabled or disabled. Served on Phala in a TDX-attested enclave.

Aug 24, 2026
1M context
$0.20/M input
$2.50/M output
$0.05/M cache read

Phala: Gemma-4 26B-A4B Uncensored (Heretic)

Uncensored "Heretic" variant of google/gemma-4-26B-A4B-it created using Heretic v1.2.0 with the Arbitrary-Rank Ablation (ARA) method and row-norm preservation. Refusals drop from 100/100 to 11/100 with KL divergence 0.0499 vs the base model. The base Gemma 4 26B A4B is a Mixture-of-Experts model with 25.2B total / 3.8B active parameters (8 active / 128 total experts), 30-layer transformer with hybrid local sliding (1024) + global attention, supporting a 256K context window. Natively multimodal (text + images, variable aspect ratios). Strong on coding, reasoning, function calling, with native system prompt support across 35+ languages. Served on Phala in TDX-attested H200 enclave with end-to-end ECDSA response signing; vLLM-compatible FP8-Static quantization by cloud19 (router excluded from quantization).

May 23, 2026
262K context
$0.15/M input
$0.70/M output
$0.05/M cache read

Browse Private Models

Normal AI API vs RedPill

Privacy policies ask for trust. RedPill gives developers encrypted requests, verified private providers, signed receipts, and a single workflow for checking the evidence.

OpenAIAnthropicGooglexAIOracle

Normal AI API

Privacy depends on policy language
Provider proof is fragmented or unavailable
No unified verification workflow
No per-response receipt or audit session

PhalaTinfoilNEAR AIChutes

RedPill Private AI

Verified private model routing
End-to-end encrypted AI paths
Live price, speed, and uptime routing
Signed receipts and verifier tooling

How it works

Trusted by Industry Leaders

From AI infrastructure providers to law firms and security companies. RedPill powers privacy-first AI for organizations that can't compromise on confidentiality.

Our Partners & Integrations

Cameron, Director of Near AI

"RedPill's confidential computing approach aligns perfectly with our vision for decentralized AI. Their TEE infrastructure sets a new standard for privacy-preserving inference at scale."

Elizabeth Leon Gonzalez, Milligan, Beswick, Levine & Knox LLP

"Attorney-client privilege is non-negotiable. RedPill is the only AI platform our firm trusts for case research and contract analysis. The cryptographic guarantees give us confidence no other tool can."

Vin Sharma, Founder at Vijil AI

"As a security-focused AI company, we evaluated every private AI solution on the market. RedPill's end-to-end encryption and TEE architecture passed our most rigorous security audits."

Chris Were, CEO at Blue Nexus AI

"We built Blue Nexus on the belief that personal AI should be truly personal. RedPill's infrastructure lets us deliver that promise: your AI assistant that never shares your secrets."

Enterprise Ready

Complete Compliance & Security Readiness

RedPill meets the highest security and compliance standards for regulated industries. Our TEE-based architecture ensures your data stays protected while meeting enterprise requirements.

SOC 2 Type II Certified

Annual audits verify our security controls for data protection, availability, and confidentiality meet enterprise standards.

HIPAA Compliant

Healthcare organizations can safely use RedPill with protected health information. BAAs available for enterprise customers.

GDPR & ISO 27001

Full compliance with EU data protection regulations and internationally recognized information security management.

Start building in 1 minute

Create a key, point your OpenAI SDK at the Gateway, and send your first private request.

Start building

AI Privacy,End to End