Friends, thank you for trying Panda!

This doc has everything you (hopefully) need to enjoy the experience. Let us know if you have any questions!

<aside> 🧑‍💻

→ Want to dive deep into the tech? Panda Technical FAQ

</aside>

What is Panda?

Panda is a privacy-first ChatGPT alternative. Every conversation runs inside hardware-isolated TEEs (Trusted Execution Environments)—completely shielded from our view.

We’ve posted software hashes on-chain, and the server gives you proof for every session.

Put simply: We can’t read your data—even if we wanted to—and you can verify that we’re telling the truth.

What problem does Panda solve?

AI now powers doctors, lawyers, counselors—and often outperforms your best teammate.

But today’s AI services still ask you to trade privacy for convenience: your raw prompts, your IP, your identity. For builders, doctors, lawyers, investors, or anyone who values confidentiality, that trade-off is unacceptable.

Panda ends that trade-off—combining cutting-edge privacy tech with full transparency.

How does Panda solve the problem?

• TEE Isolation (Intel TDX + NVIDIA Confidential Computing): Locks both CPU and GPU memory so your prompt and response never leave the secure enclave.
• End‑to‑End Encryption: Your browser encrypts everything directly to the TEE—nobody in between can read your messages.
• On‑Chain & TEE Attestation: Each enclave uploads its software hash to-chain. You can verify that you’re interacting with the correct version and that encryption is intact.
• Open‑Source Codebase: Full transparency—you can inspect, verify, and reproduce the system yourself.
• Optional Encrypted Cloud: Want a multi-device experience? Store your conversations encrypted with your own key. This feature is fully optional.

→ More details in the technical FAQ: Panda Technical FAQ

Progressive decentralization

To provide a sustainable privacy AI system, we must decentralize. Panda is a powerful tool, but this will bring challenges—including regulations, misuse by unfaithful parties, attacks, etc. To reduce the risks, we need to remove Sunnyside as a Single point of failure down the road.