AI Privacy,End to End

Real private AI means the model runs inside GPU TEE, model hosting emits verifiable privacy proofs, and the gateway is verifiable too.

Start building
GPU TEE Models

Inference runs inside NVIDIA Confidential Compute.

Hosting Proofs

Users can verify model-hosting privacy integrity.

Gateway Proof

RedPill gateway routing and receipts are verifiable.

One gateway to every private model

RedPill puts verified TEE providers behind one OpenAI-compatible API, with one price list and one way to verify every response.

Private models

GPU models from Phala, Tinfoil, NEAR AI, Chutes, and new verified providers, without rebuilding your app for each network.

TEE-secured gateway

Requests pass through a gateway running in a trusted execution environment, with encrypted paths for prompts and responses.

One price per token

Unified token prices across providers. Pay as you go, no minimum spend.

Unified verification

Gateway attestation, provider verification, and signed receipts follow one workflow for every provider.

Two ways to start building

Call the OpenAI-compatible API from your application, or connect your agents through the Private AI Proxy desktop app.

import OpenAI from "openai";

const client = new OpenAI({
  baseURL: "https://tee.redpill.ai/v1",
  apiKey: process.env.REDPILL_API_KEY,
});

const response = await client.chat.completions.create({
  model: "openai/gpt-oss-120b",
  messages: [{ role: "user", content: "Say hello." }],
});

For applications

Point your OpenAI SDK at the Gateway. Chat, completions, and embeddings work unchanged.

Private AI Proxy desktop application overview

For agents

Connect Claude Code, Codex, Pi, and more through Private AI Proxy. Traffic is protected while a verified session is active.

Private AI Model Catalog

Verified TEE providers, one price per token, no minimum spend.

Phala: Qwen3.8 27B Uncensored (Aggressive)NewTrusted Execution Environment
HauhauCS Qwen3.8-27B Uncensored Aggressive, using the pinned Q8_K_P GGUF and BF16 vision projector. Served with SGLang on a Phala TDX-attested H200, with text and image input and a 262144-token context.
  • Sep 16, 2026
  • 262K context
  • $0.30/M input
  • $1.50/M output
  • $0.05/M cache read
Z.ai: GLM 5.3Trusted Execution Environment
GLM-5.3 is a large-scale reasoning model from Z.ai, built for complex software engineering and long-horizon agent tasks. It supports text input and output with a 1M-token context window. Served as a text-only TEE deployment via Phala.
  • Aug 31, 2026
  • 1M context
  • $1.40/M input
  • $4.40/M output
  • $0.26/M cache read
Qwen: Qwen3.8 27BBetaTrusted Execution Environment
Qwen3.8 27B is an open-weight dense vision-language model from Qwen. It is suited for coding, professional workflows, research, multimodal interaction, and long-running agent tasks, with flexible thinking that can be enabled or disabled. Served on Phala in a TDX-attested enclave.
  • Aug 24, 2026
  • 1M context
  • $0.20/M input
  • $2.50/M output
  • $0.05/M cache read
Qwen: Qwen3.6 27BTrusted Execution Environment
Qwen3.6 27B is a dense 27-billion-parameter language model from the Qwen Team at Alibaba, released in April 2026. It features hybrid multimodal capabilities accepting text and image inputs, a configurable thinking/reasoning mode, and a native 262K context window. Served as a TEE deployment via Chutes.
  • Jun 4, 2026
  • 262K context
  • $0.32/M input
  • $3.25/M output
  • $0.03/M cache read

Normal AI API vs RedPill

Privacy policies ask for trust. RedPill gives developers encrypted requests, verified private providers, signed receipts, and a single workflow for checking the evidence.

Trust-me AI
OpenAIAnthropicGooglexAIOracle

Normal AI API

  • Privacy depends on policy language
  • Provider proof is fragmented or unavailable
  • No unified verification workflow
  • No per-response receipt or audit session
Private AI gateway
PhalaTinfoilNEAR AIChutes

RedPill Private AI

  • Verified private model routing
  • End-to-end encrypted AI paths
  • Live price, speed, and uptime routing
  • Signed receipts and verifier tooling
How it works
VS

Trusted by Industry Leaders

From AI infrastructure providers to law firms and security companies. RedPill powers privacy-first AI for organizations that can't compromise on confidentiality.

Our Partners & Integrations

  • NVIDIA Inception
  • Linux Foundation
  • OpenRouter
  • LLMTune
  • NEAR AI
  • Vijil AI
  • ORGN
  • Blue Nexus AI
  • OODA AI

Cameron, Director of Near AI

"RedPill's confidential computing approach aligns perfectly with our vision for decentralized AI. Their TEE infrastructure sets a new standard for privacy-preserving inference at scale."

Elizabeth Leon Gonzalez, Milligan, Beswick, Levine & Knox LLP

"Attorney-client privilege is non-negotiable. RedPill is the only AI platform our firm trusts for case research and contract analysis. The cryptographic guarantees give us confidence no other tool can."

Vin Sharma, Founder at Vijil AI

"As a security-focused AI company, we evaluated every private AI solution on the market. RedPill's end-to-end encryption and TEE architecture passed our most rigorous security audits."

Chris Were, CEO at Blue Nexus AI

"We built Blue Nexus on the belief that personal AI should be truly personal. RedPill's infrastructure lets us deliver that promise: your AI assistant that never shares your secrets."

Enterprise Ready

Complete Compliance & Security Readiness

RedPill meets the highest security and compliance standards for regulated industries. Our TEE-based architecture ensures your data stays protected while meeting enterprise requirements.

SOC2HIPAA

SOC 2 Type II Certified

Annual audits verify our security controls for data protection, availability, and confidentiality meet enterprise standards.

SOC2

HIPAA Compliant

Healthcare organizations can safely use RedPill with protected health information. BAAs available for enterprise customers.

HIPAA

GDPR & ISO 27001

Full compliance with EU data protection regulations and internationally recognized information security management.

GDPR

Start building in 1 minute

Create a key, point your OpenAI SDK at the Gateway, and send your first private request.

Start building

Search

Search models and pages.