Privatemode AI for GitHub Copilot

GitHub Copilot Chat with end-to-end encrypted AI. Powered by Privatemode.

Use Privatemode as an AI provider inside GitHub Copilot Chat for VS Code and keep your data always private.

⚠️ Preview: This extension is currently in preview. Features and APIs may change as we gather feedback and improve the extension.

🔒 About Privatemode

Privatemode is the first AI service with true end-to-end confidential computing. It encrypts your data before it leaves your device and keeps it protected even during AI processing. Its advanced design, among others, ensures the following:

• Your code, prompts, and responses are never visible to us or the infrastructure provider.
• Your data can't and won't be used for training.
• Verifiable privacy and integrity through hardware-based remote attestation.

With Privatemode, you can confidentially use state-of-the-art open-source models like gpt-oss-120b and Qwen3-Coder for coding, content generation, and analysis — without compromising security.

Privatemode is hosted in the EU and developed by Edgeless Systems.

⚡ Quick start

1. Make sure the GitHub Copilot Chat extension is installed.
2. Install this extension.
3. Create a free Privatemode account to get your API key.
4. Start the Privatemode Proxy with your API key (see below).
5. Open the Manage Language Models dialog of the GitHub Copilot Chat extension and select Privatemode as provider.
6. If your proxy wasn't started with an API key, you can enter one in VS Code.
7. Choose the models you want to see in the model picker.

You’re all set. Now you can chat with an AI inside VS Code while keeping your data secure.

About the Privatemode Proxy

This extension requires the Privatemode Proxy to be running locally or on a trusted host. It does the following:

• It encrypts and decrypts all data.
• It verifies the integrity of the Privatemode backend.
• It exposes an API endpoint for GitHub Copilot Chat.

Run it via Docker:

docker run -p 8080:8080 \
  ghcr.io/edgelesssys/privatemode/privatemode-proxy:latest \
  --apiKey <your-api-key>

You can learn more about Privatemode and the proxy in the docs.

⚠️ Disable inline code completions for privacy

Inline code completions (tab completions) from GitHub Copilot are not routed through this extension and will still be served directly by GitHub. To ensure that no code is sent to GitHub:

• Open Settings (⌘ +, / Ctrl + ,)
• Search for Copilot
• Disable completions globally or for specific file types

You can get privacy-preserving code completions by using the Continue plugin and configuring it to use the Privatemode Proxy.

Note: If you’re using a GitHub Copilot Business or Enterprise plan, the Manage Models option may not appear. To enable it, switch temporarily to a Pro or Free plan. This limitation is being addressed by Microsoft.