ExpressVPN has launched ExpressAI, a privacy-focused AI platform that processes every user prompt inside a confidential computing enclave, a hardware-isolated environment where encryption keys are generated on the chip itself, making the data unreadable to the company operating the service.
The platform, bundled into ExpressVPN’s Pro plan at no additional cost, addresses a growing tension in consumer AI: users are increasingly turning to chatbots for sensitive tasks, drafting emails about health concerns, summarizing financial documents, troubleshooting workplace issues, but those prompts typically pass through servers where the service provider can read, store and train on them. ExpressAI is designed to eliminate that trade-off entirely.
Every interaction runs inside a secure enclave, a cryptographically isolated environment within the server’s processor. Data is decrypted only inside that enclave, processed by the AI model, and re-encrypted before being returned. The company describes the architecture as “zero-access”, not even ExpressVPN’s infrastructure operators can read user conversations. Chat history can be further protected with a user-controlled encryption vault, where a personal password controls decryption, or set to auto-delete through a “ghost mode” setting.
ExpressAI ships with five AI models at launch, reflecting a multi-model strategy rather than a single proprietary system. OpenAI’s GPT OSS 120B handles everyday reasoning and writing; DeepSeek R1 Distill 32B handles multi-step logic and research; Qwen2.5-VL 32B processes vision tasks including document reading and image analysis; Qwen3.5 35B-A3B targets coding and multilingual work; and NVIDIA’s Nemotron 12B focuses on technical reasoning and mathematics. A side-by-side comparison view lets users run the same prompt across multiple models simultaneously.
The underlying infrastructure was independently audited by Cure53, the German cybersecurity firm, in February and March 2026. The audit included penetration testing and source code review of ExpressAI’s frontend, backend, cryptography, key management and infrastructure. Cure53 concluded that “the product meets its stated privacy objectives by providing modern AI capabilities within confidential computing enclaves, where user interactions are processed in cryptographically isolated contexts.” All identified vulnerabilities were remediated before launch.
Pro subscribers receive 500 daily credits and 2 GB of storage. The platform is rolling out via a standalone web app at app.expressai.com.
ExpressAI extends ExpressVPN’s broader privacy portfolio, which already includes the ExpressKeys password manager, Identity Defender, and ExpressMailGuard. The company’s move into AI reflects an industry-wide shift toward confidential computing as a differentiator for consumer AI services, a response to growing awareness that most AI chatbots log, review and sometimes train on user conversations by default.
Sources: ExpressVPN Just Launched ExpressAI: Your Prompts Are Now Invisible (Gizmodo, Jul 13, 2026); ExpressVPN Launches ExpressAI (Scoop, Apr 1, 2026); ExpressAI Product Page