Since Apple introduced Private Cloud Compute in June 2024, the company has repeated one promise at nearly every opportunity: sensitive Apple Intelligence requests never leave hardware Apple built and controls. On June 8, 2026, that promise changed shape. Apple confirmed it is now running Private Cloud Compute workloads on Google Cloud, on Nvidia GPUs Apple does not own, inside data centers Apple does not operate. It is the first time in PCC’s two-year history that Apple has extended its privacy architecture beyond its own walls.
The announcement landed alongside WWDC 2026 and a new generation of Apple Foundation Models called AFM 3. Together, the two moves mark the biggest restructuring of Apple’s AI infrastructure strategy since Private Cloud Compute launched. They also hand Google Cloud a marquee validation win in a cloud market where it still trails Amazon Web Services and Microsoft Azure by a wide margin. Here is what actually changed, why Apple made the trade, and what it signals for the rest of the cloud computing industry.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
What Apple Just Announced About Private Cloud Compute
On Monday, June 8, 2026, Apple published a post on its security research site confirming that Private Cloud Compute, the server infrastructure behind the most demanding Apple Intelligence requests, is no longer confined to Apple-owned data centers. Apple put it plainly:
“Alongside the next generation of Apple Intelligence, today we’re expanding Private Cloud Compute (PCC) beyond Apple’s data centers.”
Apple, Official Security Blog
The company went further and named its new infrastructure partners directly:
“Now, we are collaborating with Google and NVIDIA to run new Apple Intelligence workloads on Google Cloud, extending our industry-leading PCC privacy commitments to third-party data centers for the first time.”
Apple, Official Security Blog
That is a real reversal. Since PCC’s 2024 debut, Apple’s pitch centered on vertical control: custom silicon, custom server hardware, and a software stack built entirely in-house, justified by the argument that Apple could not fully guarantee privacy on infrastructure it did not own. CNBC reported that the new deployment runs Apple Intelligence’s most demanding inference workloads on Nvidia GPUs sitting inside Google Cloud data centers, a detail an Apple official confirmed directly:
“We work with both Google and Nvidia to extend our private cloud compute infrastructure to Nvidia GPUs in Google’s cloud, while maintaining Apple’s unmatched privacy guarantees.”
Apple official, quoted by CNBC
Google, Nvidia, and Intel all get named as infrastructure partners in Apple’s announcement, a level of public dependency Apple has never previously disclosed for a consumer AI feature running at iPhone scale. CIO Dive described the move as Apple opening third-party access to Private Cloud Compute for the first time. The shift is narrow in scope, applying only to Apple’s most compute-intensive Apple Intelligence requests, but symbolically it closes a two-year chapter of Apple insisting it needed nobody else’s servers.
Inside Private Cloud Compute: The Privacy Model Apple Won’t Break
Private Cloud Compute exists because some Apple Intelligence tasks are too demanding to run entirely on an iPhone or Mac. When a request needs a bigger model than the device can hold, it gets routed to a PCC node instead of a generic cloud server. Apple built PCC around five design requirements it has repeated since 2024: stateless computation, enforceable guarantees, no privileged runtime access, non-targetability, and verifiable transparency. At its original unveiling, Apple projected sub-100 millisecond latency for 90% of users by 2026 across a PCC footprint spanning five continents of nodes, and it has said the architecture can handle roughly 80% of AI inference tasks without storing data or user identifiers. Early Siri tests built on PCC reportedly cut latency from 280 milliseconds to about 85 milliseconds, a nearly 70% reduction, while cutting the amount of user data leaving the device by roughly 92% compared with traditional cloud LLM processing.
In practice, that means a PCC node only sees a request long enough to answer it. Apple’s original 2024 PCC documentation states that user data “isn’t accessible to anyone other than the user, not even to Apple,” and that it is deleted the moment a response is returned. No logging, no retention, no debugging access for Apple’s own engineers. Apple’s privacy lab reiterated that same guarantee on June 10, 2026, pointing to a security guide it updated in 2026 to cover the Google Cloud expansion. Independent security researchers can check these claims because Apple publishes the PCC software images and research tooling publicly, and pays out rewards through its Security Bounty Program for anyone who can break the guarantees.
The Guarantee That Now Has to Survive a Change of Landlord
The hard question raised by the Google Cloud expansion is whether those five guarantees survive a change of physical location. Apple’s answer, published alongside the announcement, is that the security model travels with the workload rather than depending on who owns the rack: user data “will continue to be protected by the full force of PCC’s extraordinary security and privacy properties” no matter where the infrastructure sits, according to Apple’s security documentation. Google Cloud’s own blog post on the arrangement, published June 12, 2026, describes a layered security approach built specifically to support Apple’s requirements, combining hardware-level protections most cloud customers never touch. Whether that holds up under adversarial research is now a testable question rather than a marketing claim, which is precisely the point of Apple publishing its verification tooling in the first place.
The New Hardware Stack: Nvidia GPUs, Intel TDX and Google’s Titan Chip
The technical core of the deal is a hardware trust chain that mixes silicon from four companies inside a single request. According to Apple’s security blog and Google Cloud’s own technical writeup, the new PCC nodes on Google Cloud combine Nvidia GPUs running Nvidia Confidential Computing, Intel CPUs using Intel Trust Domain Extensions, known as TDX, and Google’s custom Titan security chip as a hardware root of trust. Apple layers its own attestation and key-management model on top of all three.
Google Cloud describes the arrangement as a layered security approach built on its own infrastructure, pairing Intel TDX with Nvidia’s confidential GPU protections and Titan-based hardware verification, engineered to satisfy privacy commitments Apple originally designed only for its own silicon. Below is a simplified version of that request flow, based on the public technical descriptions Apple and Google have each published.
Apple device sends an Apple Intelligence request
-> Request routed to nearest available PCC node
-> PCC node (now includes Google Cloud data centers)
- Nvidia GPU running Nvidia Confidential Computing
- Intel CPU with Trust Domain Extensions (TDX)
- Google Titan chip as hardware root of trust
- Apple attestation and Secure Enclave-derived keys
-> Stateless inference: no logging, no retained user data
-> Response returned to device, node state discardedApple’s own PCC servers, the ones still running inside Apple’s data centers, are a separate track entirely. Reporting from February 2026 indicated Apple had begun shifting those in-house nodes to M5-based architecture, its newest Apple Silicon generation, up from the M2 Ultra chips PCC launched on in 2024. The Google Cloud nodes run on Nvidia GPUs instead, which means Apple is now operating two parallel PCC hardware generations at the same time, for the first time since the platform launched. By June 2026, Gadgets Now counted five new Apple Foundation Models running on PCC across those two tracks, split between jobs handled on Apple silicon PCC and jobs routed to PCC on Google Cloud GPUs.
AFM 3: Apple’s Third-Generation Foundation Models Explained
The infrastructure announcement was not made in isolation. It landed alongside Apple’s unveiling of AFM 3, the third generation of Apple Foundation Models, at WWDC 2026 on June 8 and 9. AFM 3 consists of five models split across two deployment targets: two on-device models, AFM 3 Core and AFM 3 Core Advanced, built to run entirely on an iPhone, iPad, or Mac, and three server-side models that run on Private Cloud Compute. As of June 2026, Apple is offering Apple Foundation Models on PCC at $0 cloud API cost to developers whose apps have logged fewer than 2 million first-time App Store downloads, an incentive aimed at getting AFM 3 embedded across the app ecosystem before the model family matures.
The most demanding of the three, AFM 3 Cloud Pro, is the one running on Nvidia GPUs inside Google Cloud rather than on Apple’s own servers, making it the first Apple foundation model ever deployed outside Apple-controlled hardware. Apple introduced AFM 3 Cloud Pro on June 9, 2026 as its top server-side model, positioned for complex reasoning and tool-use tasks, according to Gadgets Now’s coverage of the WWDC 2026 rollout.
On-Device vs Cloud: How Apple Splits the Workload
The split follows the same logic Apple has used since 2024: keep everything that fits on-device, and only route a request to PCC when the task needs a bigger model than a phone or laptop can realistically run. What’s new in AFM 3 is that the PCC branch no longer guarantees the request stays on Apple-owned hardware. For the most demanding tier, it now guarantees the request stays inside Apple’s verified security perimeter, wherever that perimeter physically sits. That is a meaningful redefinition. Apple has effectively shifted its privacy promise from being about ownership to being about verifiability.
A Deal Two Years in the Making: From a Gemini Bet to a Cloud Infrastructure Deal
The June 8 infrastructure announcement is the technical follow-through on a partnership Apple and Google first disclosed five months earlier. On January 12, 2026, the two companies issued a joint statement confirming a multi-year collaboration:
“Apple has entered into a multi-year collaboration under which the next generation of Apple Foundation Models will be based on Google’s Gemini models and cloud technology.”
Apple and Google, Joint Statement
That same statement stressed continuity on privacy:
“Apple Intelligence will continue to run on Apple devices and Private Cloud Compute, while maintaining Apple’s industry-leading privacy standards.”
Apple and Google, Joint Statement
At the time, financial terms were not officially disclosed by either company, but as Tech Insider reported in January, multiple outlets said Apple agreed to pay Google roughly $1 billion a year to license a custom 1.2 trillion-parameter Gemini model, described as about eight times larger than the cloud models Apple had been running, to power a rebuilt Siri and other Apple Intelligence features. Neither company has confirmed that figure on the record.
What January’s statement did not specify was where the compute for those Gemini-derived models would physically run. June 8 answered that question: on Google Cloud, alongside Nvidia and Intel hardware, inside the PCC security model. The table below lines up the key dates.
| Date | Milestone |
|---|---|
| June 10, 2024 | Apple unveils Private Cloud Compute at WWDC, running exclusively on Apple-built servers |
| January 12, 2026 | Apple and Google announce a multi-year deal; next-generation Apple Foundation Models to be built on Google’s Gemini technology |
| January 2026 (reported) | Multiple outlets report Apple will pay Google roughly $1 billion a year for a custom 1.2 trillion-parameter Gemini model; unconfirmed by either company |
| February 17, 2026 | Reports say Apple is shifting its own PCC servers to M5-based Apple Silicon architecture |
| April 29, 2026 | Alphabet reports Q1 2026 earnings; Google Cloud revenue up 63% to $20.03 billion |
| June 8, 2026 | Apple confirms PCC now runs on Google Cloud with Nvidia GPUs, the first time outside Apple’s own data centers |
| June 8-9, 2026 | Apple unveils the AFM 3 model family, five models total, at WWDC 2026 |
| June 12, 2026 | Google Cloud publishes technical detail on the confidential computing stack supporting PCC |
The Google Cloud Numbers Behind the Apple Deal
Google Cloud’s willingness to build custom confidential-computing infrastructure for a single hardware partner makes more sense against the backdrop of its recent growth. Alphabet’s first-quarter 2026 earnings, reported April 29, 2026, showed Google Cloud revenue climbing 63% year over year to $20.03 billion, up from $12.26 billion in the same quarter of 2025 and well ahead of the roughly $18.4 billion Wall Street had modeled. Cloud operating income reached $6.6 billion, roughly tripling year over year, with operating margin expanding from 17.8% to 32.9%. Alphabet’s total revenue for the quarter hit $109.9 billion, up 22%, and the company raised its 2026 capital expenditure guidance to a range of $180 billion to $190 billion, largely to fund AI and cloud infrastructure.
| Metric | Q1 2026 Figure | Year-Over-Year Change |
|---|---|---|
| Google Cloud revenue | $20.03 billion | +63% (from $12.26 billion) |
| Cloud operating income | $6.6 billion | Roughly 3x |
| Cloud operating margin | 32.9% | Up from 17.8% |
| Alphabet total revenue | $109.9 billion | +22% |
| Alphabet 2026 capex guidance | $180 billion – $190 billion | Raised guidance |
Landing Apple as a confidential-computing customer, even for a defined slice of workloads, gives Google Cloud a reference account few competitors can claim. Apple’s reputation for privacy engineering is arguably its most valuable brand asset outside of product design, and Google now gets to say its infrastructure passed Apple’s bar. That is a sales argument Google Cloud’s enterprise team can reuse with every healthcare, financial services, and government customer currently deciding which hyperscaler to trust with sensitive workloads.
Cloud Market Share: Why Google Needed a Win Like This
Despite the growth rate, Google Cloud remains the third-largest infrastructure provider by a comfortable margin. Synergy Research Group’s Q1 2026 figures, reported by CRN, put AWS at 28% of global cloud infrastructure spending, Microsoft Azure at 21%, and Google Cloud at 14%, with the three hyperscalers together controlling 63% of the market.
| Provider | Q3 2025 Share | Q1 2026 Share |
|---|---|---|
| Amazon Web Services | 29% | 28% |
| Microsoft Azure | 20% | 21% |
| Google Cloud | 13% | 14% |
| Combined “Big Three” | 62% | 63% |
Google’s share has moved only a point or two over the past several quarters, which is exactly why a marquee customer win matters more than the percentage alone suggests. Google Cloud cannot out-discount AWS or out-bundle Microsoft’s Azure and Office integration, so differentiating on trust and confidential-computing capability is one of the few levers it has left. Winning Apple as a customer for its most security-sensitive product, even in a limited scope, is a credibility signal that is hard to buy with marketing spend.
What the Apple-Google Cloud Deal Means for AWS and Azure
Neither Amazon nor Microsoft has publicly responded to Apple’s announcement, and no analyst commentary specific to this deal was available at publication. But the competitive logic is straightforward. AWS has spent years building out its own Nitro Enclaves confidential-computing product, and Microsoft Azure offers a comparable confidential VM lineup built on Intel SGX and TDX, AMD SEV-SNP, and its own silicon investments. Both companies now have a concrete, high-profile example to measure themselves against: Apple picked Google.
That does not mean AWS or Azure lost a bid, since there is no public evidence Apple ran a competitive process at all. Apple’s decision may have been shaped as much by the parallel Gemini-for-Siri partnership as by infrastructure specifications. Still, in a market where enterprise buyers increasingly ask who else trusts a given cloud provider with sensitive data, Apple’s name on Google Cloud’s customer list is a reference AWS and Azure sales teams will have to address in competitive deals, particularly with privacy-conscious customers in healthcare and financial services who expect hyperscalers to prove security claims rather than assert them.
The Privacy Paradox: Staying “Private” on Someone Else’s Servers
The central tension in Apple’s announcement is one Apple itself invited by building its brand on data sovereignty. For two years, Apple’s implicit argument was that true privacy required Apple to control the entire stack, since trusting any third party introduced risk Apple could not fully verify. Extending PCC to Google Cloud tests that argument directly.
Apple’s counter-argument, laid out across its security documentation, is that privacy was never really about who owns the hardware. It was about whether the guarantees are independently verifiable regardless of ownership: stateless processing, no privileged access, no persistent logging, and publicly auditable software images. If that verification model holds on Google’s infrastructure the same way it holds on Apple’s, the physical location of the servers becomes close to irrelevant. If it does not, Apple has handed critics its first real test case.
Privacy-focused communities on forums such as PrivacyGuides and Reddit’s r/privacy flagged the announcement within hours, debating whether Nvidia’s and Google’s involvement introduces attack surface Apple cannot fully control on its own. That skepticism is likely to shape how quickly enterprise customers and privacy advocates accept the arrangement, independent of what Apple’s technical documentation claims.
Developers and Security Researchers Are Already Testing the Claims
Apple did not just announce the change, it opened the new infrastructure to the same scrutiny as the original PCC rollout. The company continues to publish PCC software binaries and research tooling publicly, and its Security Bounty Program now extends to live PCC nodes running on the Google Cloud deployment, not only the Apple-owned track. Apple and Google have also said they will share additional technical detail at the Confidential Computing Summit later in June 2026.
That transparency posture matters because it is the mechanism that lets outside researchers, not just Apple’s own engineers, confirm whether the five PCC guarantees survive the move to third-party infrastructure. It is a sharply different approach from how most cloud providers handle confidential-computing claims, which typically lean on compliance certifications rather than public bug bounties. Independent scrutiny is already underway: a May 2026 academic analysis benchmarked PCC’s large cloud model on a 5-shot MMLU evaluation and found accuracy “comparable but below” Apple’s own published claims, while also noting that PCC remains free of charge to users. Whether independent researchers find further gaps in the Google Cloud implementation over the coming months will likely shape enterprise trust in the arrangement more than any statement from either company’s communications team.
Historical Context: From WWDC 2024 to WWDC 2026
Private Cloud Compute launched at WWDC on June 10, 2024, introduced as Apple’s answer to a problem every phone maker doing on-device AI eventually hits: some tasks are too big for a handset, but sending them to a generic cloud server breaks the privacy model Apple had spent a decade building into iOS. Apple’s original solution was total vertical integration, running PCC exclusively on custom server hardware built around the same Secure Enclave and Secure Boot technology found in the iPhone.
That approach held for almost exactly two years. Strain showed up first at the model layer, where Apple’s in-house foundation models struggled to keep pace with Google’s Gemini and OpenAI’s GPT releases, part of what pushed Apple toward the January 2026 Gemini licensing deal in the first place. The infrastructure followed the models. Once Apple committed to running Gemini-derived reasoning inside Apple Intelligence, running that workload exclusively on Apple’s own, smaller server fleet became a capacity and cost problem as much as an engineering one. June 8, 2026 is best read as Apple’s infrastructure catching up to a strategic decision it had already made in January.
Market Impact and Investor Reaction
No confirmed same-day stock price move for Alphabet or Apple tied specifically to the PCC announcement was available at publication, and neither company’s investor relations materials have broken out financial terms for the Google Cloud arrangement separately from the broader Gemini licensing deal disclosed in January. That makes the market impact harder to quantify than the technical story.
What is measurable is the backdrop the deal lands against. Alphabet’s Q1 2026 results already showed Google Cloud’s backlog nearly doubling quarter over quarter, a sign of enterprise demand outpacing what analysts had modeled even before the Apple relationship took its current public form. A deal of this profile, even without disclosed dollar figures, reinforces the narrative Alphabet has been selling investors since early 2026, that its AI infrastructure investments are converting into enterprise wins that large-cap technology companies are willing to attach their name to publicly. Wall Street’s read on that narrative will likely sharpen over Google Cloud’s next two quarterly earnings calls, where analysts are likely to press for more detail on the Apple relationship’s scope and revenue contribution.
5 Predictions for Apple’s Cloud Computing Strategy
- AWS and Microsoft publicize their own confidential-computing wins. Expect both companies to use Apple’s announcement as a competitive benchmark within the next two quarters rather than staying quiet about their own Nitro Enclaves and confidential VM customers.
- Apple adds a second third-party cloud within 12 to 18 months. If Google Cloud capacity or pricing becomes a constraint, Microsoft Azure or Oracle Cloud are the most plausible next additions, consistent with Apple’s stated preference for hardware diversity over single-vendor dependence.
- The roughly $1 billion-a-year licensing structure becomes a template. Expect more device makers to license frontier models from Google, OpenAI, or Anthropic rather than building foundation models from scratch, following the economics Apple reportedly agreed to.
- Regulators take a closer look. The EU and US are likely to examine whether Apple designating Google as its foundation-model and infrastructure supplier disadvantages rival AI providers seeking placement on iOS, adding a new thread to existing Digital Markets Act scrutiny of Apple’s platform decisions.
- Google Cloud leans on the Apple relationship in enterprise sales. Expect explicit references to the PCC deployment in pitches to healthcare and financial services customers evaluating confidential computing, using Apple’s public bug bounty extension as third-party proof its security claims hold up.
These are analyst-style projections based on the pattern of the deal, not confirmed roadmap items from Apple or Google.
Frequently Asked Questions About Apple Private Cloud Compute
What is Apple Private Cloud Compute?
Private Cloud Compute, or PCC, is the server infrastructure Apple built to handle Apple Intelligence requests too demanding for an iPhone, iPad, or Mac to process alone. Apple designed PCC around five guarantees, including stateless computation and no privileged runtime access, so a request sent to PCC gets privacy protection comparable to processing directly on a user’s device. PCC launched at WWDC on June 10, 2024.
Why is Apple running Private Cloud Compute on Google Cloud now?
Apple says the move lets it run new, more demanding Apple Intelligence workloads, including models built on Google’s Gemini technology under the January 2026 partnership, without waiting to build enough of its own server capacity. Apple confirmed the change in a June 8, 2026 security blog post, describing it as extending PCC’s privacy commitments to third-party infrastructure for the first time.
Does Google get access to Apple users’ data through this deal?
Apple says no. Under Apple’s published PCC design, requests are processed statelessly, meaning data is used only to generate a response and deleted immediately afterward, with no logging or persistent storage, and Apple states this applies regardless of which data center physically runs the workload. Business Standard reported on June 12, 2026 that Apple maintains PCC-processed requests are never stored and that personal data remains inaccessible to Apple, Google, or any other third party even after the Google and Nvidia expansion. Google Cloud’s blog post describes hardware-level protections, including Intel TDX and Nvidia Confidential Computing, built to enforce that isolation, and independent researchers can test the claims through Apple’s public verification tools and Security Bounty Program.
What is AFM 3?
AFM 3 is the third generation of Apple Foundation Models, unveiled at WWDC 2026. It includes five models: two that run entirely on-device, AFM 3 Core and AFM 3 Core Advanced, and three that run on Private Cloud Compute, the most demanding of which, AFM 3 Cloud Pro, runs on Nvidia GPUs inside Google Cloud.
How much is Apple paying Google for this partnership?
Neither company has officially disclosed financial terms for the Google Cloud infrastructure deal or the wider AI partnership. Multiple outlets reported Apple agreed to pay Google roughly $1 billion a year as part of the January 2026 agreement to license a custom Gemini model for Siri, but that figure has not been confirmed by either company.
Is this the same as the Siri-Gemini deal announced in January 2026?
It is connected but not identical. The January 2026 joint statement covered the model layer, confirming Apple’s next-generation Foundation Models would be built on Google’s Gemini technology. The June 2026 announcement covers the infrastructure layer, confirming where those models actually run: on Google Cloud, using Nvidia and Intel hardware, inside Apple’s PCC security framework.
Will Apple bring Private Cloud Compute to AWS or Microsoft Azure too?
Apple has not announced plans to extend PCC to other cloud providers. Given Apple’s stated preference for infrastructure diversity and the scale of Apple Intelligence’s user base, it is plausible Apple could add additional cloud partners if Google Cloud capacity or pricing becomes a constraint, but nothing has been confirmed.
Which Apple devices are affected by this change?
The change affects any device running Apple Intelligence that sends a request demanding enough to require Private Cloud Compute, including recent iPhone, iPad, and Mac models. On-device processing for simpler requests is unaffected, since Apple’s on-device AFM 3 Core models still run locally regardless of this infrastructure change.
Related Coverage
- Apple’s $1 Billion Gemini Deal: How Google’s AI Is Replacing Siri’s Brain Across 2 Billion Devices
- Alphabet Q1 2026 Earnings: $109.9B Revenue, 63% Cloud Surge
- AWS vs Azure vs Google Cloud 2026: Cloud Platform Comparison
- Microsoft Azure Earnings: $678B Backlog, Up 84%
- Nvidia DGX Spark vs Mac Studio: 128GB vs 512GB RAM
- Data Center Leases Hit $850B, Meta, Microsoft Lead
- Meta to Challenge AWS: Cloud Plan Lifts Stock 9%
- More Cloud Computing Coverage
