AI Privacy,End to End

Real private AI means the model runs inside GPU TEE, model hosting emits verifiable privacy proofs, and the gateway is verifiable too.

GPU TEE Models

Inference runs inside NVIDIA Confidential Compute.

Hosting Proofs

Users can verify model-hosting privacy integrity.

Gateway Proof

RedPill gateway routing and receipts are verifiable.

Get API Key Try the Chat

One gateway to every private model

RedPill puts verified TEE providers behind one OpenAI-compatible API, with one price list and one way to verify every response.

Private models

GPU models from Phala, Tinfoil, NEAR AI, Chutes, and new verified providers, without rebuilding your app for each network.

TEE-secured gateway

Requests pass through a gateway running in a trusted execution environment, with encrypted paths for prompts and responses.

One price per token

Unified token prices across providers. Pay as you go, no minimum spend.

Unified verification

Gateway attestation, provider verification, and signed receipts follow one workflow for every provider.

Two ways to start building

Call the OpenAI-compatible API from your application, or connect your agents through the Private AI Proxy desktop app.

import OpenAI from "openai";

const client = new OpenAI({
  baseURL: "https://tee.redpill.ai/v1",
  apiKey: process.env.REDPILL_API_KEY,
});

const response = await client.chat.completions.create({
  model: "openai/gpt-oss-120b",
  messages: [{ role: "user", content: "Say hello." }],
});

For applications

Point your OpenAI SDK at the Gateway. Chat, completions, and embeddings work unchanged.

Get API Key

Private AI Proxy desktop application overview

For agents

Connect Claude Code, Codex, Pi, and more through Private AI Proxy. Traffic is protected while a verified session is active.

Private AI Model Catalog

Verified TEE providers, one price per token, no minimum spend.

Phala: Qwen3.8 27B Uncensored (Aggressive)New

HauhauCS Qwen3.8-27B Uncensored Aggressive, using the pinned Q8_K_P GGUF and BF16 vision projector. Served with SGLang on a Phala TDX-attested H200, with text and image input and a 262144-token context.

Sep 16, 2026
262K context
$0.30/M input
$1.50/M output

NVIDIA: Nemotron 3.5 LightningNewBeta

NVIDIA Nemotron 3.5 Lightning is an open mixture-of-experts model from NVIDIA, with 3B active parameters out of 30B total. It is suited for high-throughput agentic workloads and specialized tasks that...

Sep 11, 2026
262K context
$0.07/M input
$0.20/M output
$0.04/M cache read

Z.ai: GLM 5.3New

GLM-5.3 is a large-scale reasoning model from Z.ai, built for complex software engineering and long-horizon agent tasks. It supports text input and output with a 1M-token context window. Served as a text-only TEE deployment via Phala.

Aug 31, 2026
1M context
$1.40/M input
$4.40/M output
$0.26/M cache read

Qwen: Qwen3.8 27BNewBeta

Qwen3.8 27B is an open-weight dense vision-language model from Qwen. It is suited for coding, professional workflows, research, multimodal interaction, and long-running agent tasks, with flexible thinking that can be enabled or disabled. Served on Phala in a TDX-attested enclave.

Aug 24, 2026
262K context
$0.24/M input
$2.50/M output
$0.05/M cache read

Browse Private Models

Normal AI API vs RedPill

Privacy policies ask for trust. RedPill gives developers encrypted requests, verified private providers, signed receipts, and a single workflow for checking the evidence.

OpenAIAnthropicGooglexAIOracle

Normal AI API

Privacy depends on policy language
Provider proof is fragmented or unavailable
No unified verification workflow
No per-response receipt or audit session

PhalaTinfoilNEAR AIChutes

RedPill Private AI

Verified private model routing
End-to-end encrypted AI paths
Live price, speed, and uptime routing
Signed receipts and verifier tooling

How it works

Trusted by Industry Leaders

From AI infrastructure providers to law firms and security companies. RedPill powers privacy-first AI for organizations that can't compromise on confidentiality.

Our Partners & Integrations

Cameron, Director of Near AI

"RedPill's confidential computing approach aligns perfectly with our vision for decentralized AI. Their TEE infrastructure sets a new standard for privacy-preserving inference at scale."

Elizabeth Leon Gonzalez, Milligan, Beswick, Levine & Knox LLP

"Attorney-client privilege is non-negotiable. RedPill is the only AI platform our firm trusts for case research and contract analysis. The cryptographic guarantees give us confidence no other tool can."

Vin Sharma, Founder at Vijil AI

"As a security-focused AI company, we evaluated every private AI solution on the market. RedPill's end-to-end encryption and TEE architecture passed our most rigorous security audits."

Chris Were, CEO at Blue Nexus AI

"We built Blue Nexus on the belief that personal AI should be truly personal. RedPill's infrastructure lets us deliver that promise: your AI assistant that never shares your secrets."

Enterprise Ready

Complete Compliance & Security Readiness

RedPill meets the highest security and compliance standards for regulated industries. Our TEE-based architecture ensures your data stays protected while meeting enterprise requirements.

SOC 2 Type II Certified

Annual audits verify our security controls for data protection, availability, and confidentiality meet enterprise standards.

HIPAA Compliant

Healthcare organizations can safely use RedPill with protected health information. BAAs available for enterprise customers.

GDPR & ISO 27001

Full compliance with EU data protection regulations and internationally recognized information security management.

Start building in 1 minute

Create a key, point your OpenAI SDK at the Gateway, and send your first private request.

Documentation Get API Key