> isn't that what ZDR is for? (assuming you trust that)

ZDR is:

    1. A pinky-promise you have no way of verifying
    2. A contract term, which means its still subject to the good-old "lawful request or court order" clauses
    3. Subject to arbitrary provider exceptions ... see Anthropic and Fable

What you really want (assuming you can't afford your own servers and datacentre space) is secure enclave processing:

See Tinfoil (US)[1] or Privatemode (Germany)[2].

[1] https://tinfoil.sh/ [2] https://www.privatemode.ai/

Yes, in theory. The big AI company subscriptions do not offer that, they all watch you unless you pay more for the API. The only exception I have seen for big AI is Grok teams.

However the way it is going, there will not even be private APIs, just recording and watching all the time.

Anthropic is unsurprisingly leading the race to the bottom of the barrel by requiring moderator reviews for API customers. Apparently everyone at GCP and AWS complied.

GCP has just followed and done the same thing on Gemini Argon. No CMEK allowed. Azure has some ZDR but presumably they are restricting it.

Some neoclouds are still standing but some are also regressing by using server-side scanning to prompt human review.

There are two/three private TEE providers. One of them (Tinfoil) just put server-side scanning inside the enclave for the consumer product. The API is good for now, I am taking it as notice from them to get off the service before they start logging everything.