Apple is tapping Nvidia GPUs with Confidential Computing for its Private Cloud Compute, which will operate outside of Apple data centers for the first time.

The Blackwell GPUs with Confidential Computing will be used for confidential inference workloads for Apple Foundation Models that have been custom-built by Apple and Google.

The GPUs will run on Google Cloud; previously, Apple Private Cloud Compute ran solely in Apple's own data centers.

Nvidia Confidential Computing provides a hardware-based security layer for AI workloads. The technology protects data while it’s being processed by isolating workloads in execution environments and enabling systems to cryptographically verify that the infrastructure has not been tampered with before any sensitive data is sent to the server.

This builds on the multi-year agreement Apple signed with Google to use the company's AI models and cloud for its consumer devices in January 2026.

According to an Apple blog post, the Confidential Computing will be used "for the most demanding tasks, including agentic tool-use and complex reasoning, we worked with Google and Nvidia to extend our PCC infrastructure to Google Cloud systems using Nvidia GPUs, while maintaining Apple's powerful security and privacy protections."

Apple added that its PCC "set a new bar for AI privacy in the cloud," but that since its launch, "the wider industry has been working to provide a set of confidential inference primitives that could theoretically be combined to reach the security level of PCC."

Beyond the Nvidia GPUs, the PCC will also run on Intel CPUs with TDX, and Google's Titan chip.

Apple's Private Cloud Computing was launched in 2024. The company said that even when running on Google Cloud, the offering will use "many of the same architectural security patterns as PCC on Apple silicon to implement these layered protections," and that "regardless of where the infrastructure is hosted, Apple retains complete control over PCC software; Apple devices will only trust PCC software that is cryptographically approved by Apple."

The offering with Google and Nvidia is currently available in preview, and will be "gradually ramping towards the complete set of protections."

Apple and Google have a long-standing relationship. Beyond the January 2026 agreement, Apple is believed to be the platform's single biggest storage customer.

In 2024, the company began using Google's TPU chips to train its AI models. Apple is known to be developing its own server chips.

In March 2026, reports emerged that the two were discussing using Google's AI and cloud infrastructure to support the next version of Siri, Apple's digital assistant.