Confirmed 9 Nov 2026 · Compute A one-minute read

Google launched 2 AI chips, 1 built to protect model weights while in use.

On November 9 Google added TPU 8tx and TPU 8i Max to its eighth-generation line. Caveat: it published no availability date, no price and no performance number for either system.

Until now

Renting cloud compute means trusting the operator with your model's weights.

Now

Chip hardware, not a contract, can be sold as that protection.

Why it matters

Confidential compute puts the guarantee in silicon rather than in a cloud agreement. That matters to any bank, hospital or laboratory that will not put its weights on a rented machine. Google now sells the unit, the network and the trust boundary together, and it owns the whole stack.

Established

  • TPU 8tx adds hardware confidential compute protecting data and weights in use.
  • It uses TPU 8t silicon paired with 5th Gen AMD EPYC hosts.
  • TPU 8i Max packages 2 TPU 8i chips, doubling compute and bandwidth.

Not established

  • Any absolute performance figure. Google published no FLOPS, memory or bandwidth numbers.
  • When either system ships. No availability date, region or price appears.
  • How the confidential compute is attested or verified by a customer.
The five-minute readThe record, the timeline, the weight and 5 sources

The record

Google published "Introducing TPU 8tx and TPU 8i Max" on blog.google on November 9, 2026, with page metadata of 13:00 Universal Time, and we read it there. The author is Amin Vahdat, Senior Vice President and Chief Technologist for AI and Infrastructure. TPU 8tx is described as the third eighth-generation TPU system, aimed at secure, confidential inference and also suited to small-scale training. It uses the same silicon as TPU 8t, paired with 5th Gen AMD EPYC central processing unit hosts. It "adds hardware-level confidential compute that protects data and model weights while in use." It uses the Boardfly network from TPU 8i, which Google says gives up to 2 times lower latency than TPU 8t with "a near-zero performance penalty." Google says it supports fine-tuning, distillation and reinforcement learning on one system, without moving sensitive data between clusters. TPU 8i Max combines 2 TPU 8i chips onto a single package, which Google says doubles the compute, the static memory and the high-bandwidth memory bandwidth of TPU 8i. It fits twice the silicon in the existing rack footprint, which Google calls the highest compute density per rack in the portfolio. Other figures in the post belong to the earlier systems, not to these 2: the 2.7 times training and 80% inference price-performance gains are TPU 8t and 8i against the previous generation, and the "up to half" cut in inter-chip communication delay is TPU 8i. Google says TPUs have nearly 100 customers, including frontier laboratories, trading firms, retailers and universities, and names none for these systems. Not published anywhere in the post: absolute throughput, high-bandwidth memory capacity, static memory size, bandwidth figures, pod or cluster sizes, chips per rack, power or thermal numbers, any training figure for 8tx against 8t, any inference benchmark specific to either system, the baseline for the 2 times latency claim, how "near-zero" was measured, how the confidential compute is attested, availability dates, regional availability, pricing, and whether 8tx can run inside a customer's own data centre. Alphabet shares rose more than 2% before the New York open on the announcement, at $293.04, on a market value of $3.59 trillion.

How it got here

  1. Apr 23

    Google announces its eighth-generation TPU as 2 chips for the first time, TPU 8t for training and TPU 8i for inference, at Cloud Next 2026, on a 2 nanometre process, with networks scaling to 1 million TPUs per cluster.

  2. Oct 27

    Google agrees to put its own AI chips inside a rival's cloud for the first time, with Oracle. Edition 064.

  3. Oct 30

    Google runs a model on a data centre chip in orbit and gets an answer back. Edition 067.

  4. Nov 5

    Alphabet's quarterly holdings filing, accepted at sec.gov at 23:21 Universal Time, shows a $548 million Qualcomm stake acquired through an AI acquisition, as Qualcomm targets AI data centres.

  5. Nov 9

    Google publishes TPU 8tx and TPU 8i Max at 13:00 Universal Time, its third and fourth TPU systems of the year. No price, no availability date, no performance figure for either.

Who has to react

Nvidia, whose racks these compete with; Amazon Web Services and Microsoft, who sell their own confidential computing; Intel and AMD, whose confidential compute sits on the host side; the banks, hospitals and trading firms who would not rent compute on anyone's terms; the frontier laboratories renting TPUs; Oracle, now reselling them.

What to watch

  • Would strengthen itA named customer or a second major cloud cites confidential compute as the reason for buying AI accelerators, or Google publishes an attestation specification for TPU 8tx, by June 30, 2027.
  • Would weaken itTPU 8tx still has no published availability date, price or named customer by June 30, 2027, or Google drops it from the portfolio.
  • Would strengthen itOracle, or another cloud that resells Google's chips, lists TPU 8tx or TPU 8i Max for sale by December 31, 2027.

Why it weighs this much

Signal strength
CostMedium
CommitmentMedium
ReversibilityModerate
PersistenceYears

Cost is medium. TPU 8tx reuses TPU 8t silicon and TPU 8i Max repackages 2 existing chips, so neither is a new design, but confidential compute in hardware, new EPYC hosts, a new package and rack qualification are real spending. Commitment is medium and no higher: Google published the systems but no ship date, no price and no customer, and a product announced without a date can be quietly delayed. Reversibility is moderate, because a cloud can retire a machine type with notice. Persistence is years: a trust boundary sold in silicon is what the next contract gets written against, and customers who buy on that basis do not move quickly.

The words

Confidential compute
Hardware that keeps data and code unreadable to the machine's own operator while a program runs, so a cloud provider cannot inspect what it is hosting.
Model weights
The numbers a trained model is made of. They are the asset: whoever holds them holds the model.
Inference
Running a finished model to get answers, as opposed to training it. It is the bulk of AI spending now.
High-bandwidth memory
Stacked memory sitting beside the processor. Its capacity and speed, not raw arithmetic, usually limit how fast a large model answers.

Sources

Your call

Which explanation do you believe?

A call is final. Other people's calls show after yours.

8 contributions. Thank you.

You have built
a record here.

Keep it: create an account to verify your contributions and put your name to the answers you choose. Your record stays yours.

Keep my record ↗
Optional: help show whose perspectives are missing
Kept with your answers under a random id, never with your name. Used for one thing: showing you, on your record, where you stand next to people like you, once at least 20 of them have answered.

Add your signature

Stand behind your judgment.

Create an account to attach your name to this answer. Your other answers show no name unless you sign them too.

Sign up to add your name ↗

Already have an account?