Privatemode
Try Privatemode on us. Starter credit covers your first requests, then one key reaches all 3 Privatemode models, with the privacy posture shown on every route.
Privatemodeprivatemode
These privacy labels describe Privatemode, the upstream model provider. Confidential requires all three: verified provider compute, end-to-end encryption and explicit zero data retention. Account and billing metadata are outside the content-retention claim.
| Provider | Privatemode |
|---|---|
| API operator country | DE Legal home of the API operator, not an inference-location guarantee. |
| Headquarters | Not verified |
| Routing status | Active |
| Provider website | https://www.privatemode.ai/ |
| Models | 3 public models |
| Credits routes | 3 |
| Zero data retention | yes All routes |
| Verified confidential inference | Verified |
| Policy note | Requests and responses are encrypted between TrustedRouter's enclave and release-pinned Privatemode workloads after attestation verification. Verification failures reject the request; there is no plaintext fallback. Privatemode explicitly states that prompts and responses are not stored after a request completes and are not used for training. Transient inference state may remain in a salt-isolated, in-memory prompt cache inside confidential workers until eviction. Operational metadata is retained for up to 90 days; per-key token usage is retained permanently for billing. Cache-routing metadata is visible to the provider edge. ZDR describes prompt/output retention, not metadata. Policy source |
Inference locations
Provider API declarations are also available on each model's endpoint API. Direct chat and Responses replies separate advertised availability from serving location in usage.inference_location; the actual serving region remains unknown when not reported.
usage.provider_usage.gateway_region identifies the TrustedRouter gateway, not the provider's inference location. A value such as europe-west4 does not mean the model ran in Europe. usage.inference_location.serving_region remains null when the provider has not reported it. Older gateways may return the gateway-only field as provider_usage.region.
Where the upstream GPUs execute the model, not the provider's headquarters, API ingress, or data storage. ZDR and confidential inference do not by themselves restrict geography.
- Declared countries or regions
- European Union (countries unspecified)
Privatemode declares EU hosting for its inference service. This does not establish an individual worker's country. - Can locations change?
- Changes within the EU and exact model placement are not specified by the reviewed declaration.
- Provider region pinning
- No per-request country-selection contract verified.
- Pinning through TrustedRouter
- Not supported by the current TrustedRouter integration.
- Infrastructure declaration
- EU-hosted inference, provider-declared; country and individual worker location unspecified.
- Evidence
- Public provider statement; encryption attestation is separate from location evidence. Reviewed .
Provider selection alone is not a region pin. TrustedRouter's US provider filter selects company jurisdiction, not GPU location. A regional gateway hostname does not pin a downstream GPU. For a binding residency requirement, confirm the model, region, failover scope and enforced controls before sending sensitive data.
Models served by Privatemode.
Each row links to pricing, provider, benchmark, and API pages for the model.
| Model | AI IQ | Context | Input | Cached input | Output |
|---|---|---|---|---|---|
openai/gpt-oss-120bOpenAI: gpt-oss-120b |
IQ 98#132 | 131,072 | $0.24869/1M | $0.049738/1M | $0.808243/1M |
z-ai/glm-5.3Z.ai: GLM 5.3 |
IQ 124#28 | 1,048,576 | $1.927347/1M | $0.186518/1M | $7.1374/1M |
z-ai/glm-5.3-flashZ.ai: GLM 5.3 Flash |
IQ 119#45 | 1,048,576 | $0.24869/1M | $0.062174/1M | $0.808243/1M |
Questions
Does Privatemode have zero data retention?
TrustedRouter records Privatemode as supporting provider-level zero data retention based on the policy source linked on this page. This is a provider policy claim, separate from TrustedRouter's content-stateless real-time gateway and from end-to-end confidential compute.
Is Privatemode end-to-end encrypted?
TrustedRouter records Privatemode as supporting provider-side confidential compute and end-to-end encrypted inference. The route-specific model page shows whether that protection applies to a particular endpoint.
Which Privatemode models are available through TrustedRouter?
This page currently lists 3 public Privatemode models, with live pricing, route count, context length, measured performance when available, and links to each model's provider and benchmark pages.