Private Cloud Compute Now Runs on Google’s Hardware, Not Apple’s

Apple is expanding Private Cloud Compute to run on Google Cloud infrastructure, meaning Apple Intelligence requests will increasingly be processed on hardware Apple does not own or manufacture.

The move is less surprising in context. Apple already partnered with Google to use technology behind the Gemini models for its own Foundation Models, so a deeper infrastructure relationship follows logically. What makes this expansion notable is the gap it exposes: PCC was originally built around the argument that Apple silicon gave Apple unique control over the security environment. That argument gets more complicated when the hardware is NVIDIA GPUs sitting in Google data centers.

Apple’s answer to that problem is a layered hardware attestation stack:

• NVIDIA Confidential Computing on NVIDIA GPUs
• Intel CPUs with TDX (Trust Domain Extensions)
• Google’s Titan security chip for hardware root of trust

Apple also claims a cryptographically verifiable ledger of all Google Cloud hardware in the PCC fleet, which is a direct response to supply chain risk. The core privacy requirements (stateless computation, no privileged runtime access, non-targetability, verifiable transparency) remain unchanged on paper. Whether those guarantees hold the same weight when Apple is depending on another company’s physical infrastructure is a question security researchers will want to probe.

What’s Still Missing

PCC on Google Cloud is not fully implemented yet. Apple is rolling out protections gradually through beta testing, which means users currently routing requests through Google Cloud may not have the complete security envelope Apple describes.

The one concrete accountability mechanism Apple is offering is public binary inspection, with research tooling and live node access coming through the Security Bounty Program. That at least gives outside researchers something to test, rather than asking users to trust a press release. How quickly Apple completes the full implementation will say more about its actual privacy commitments here than anything in today’s announcement.