ExpressAI is finally here – but not everyone can use it yet
The app provides private-by-design AI models
Here at Tom’s Guide our expert editors are committed to bringing you the best news, reviews and guides to help you stay informed and ahead of the curve!
You are now subscribed
Your newsletter sign-up was successful
Want to add more newsletters?
Join the club
Get full access to premium articles, exclusive features and a growing list of member rewards.
ExpressAI is finally here. It's a "private-by-design" AI tool, targeted at those who want to use AI, without compromising their data privacy – and its launch completes ExpressVPN's five-app privacy suite as announced back in February 2026.
The ExpressAI app itself is end-to-end encrypted with the promise that chats and prompts are not used to train AIs. It's been independently audited by Cure53 and consists of five separate AI models, each with its own use case.
ExpressAI is first available with ExpressVPN Pro plans, with wider availability coming soon.
ExpressVPN Pro | $4.87 per month | 2 years + 4 months FREE
ExpressVPN Pro is the VPN's most premium plan. It includes all four of its extra privacy-focused apps, including ExpressAI, as well as one of the best VPNs around.
What you'll get...
🔒 Class-leading VPN
✨ Five privacy-focused apps, inc. ExpressAI
📱 Protection for up to 14 devices
📄 Independent privacy & security audits
A 28-month ExpressVPN Pro plan costs $7.49 per month ($209.72 upfront pre-tax) and comes with a 30-day money-back guarantee.
A "private-by-design" AI tool
Existing AI models pose a risk to your data privacy. They often collect and store information, using it to train models. ExpressAI is different. ExpressVPN says it is "private-by-design".
It says its "secure enclave technology" means an "isolated environment" is created, where nobody can read or access your data – including ExpressVPN. This zero-knowledge, end-to-end encryption means only you can decrypt your data.
Unlike traditional AI models, your conversations, prompts, and files are not used for model training. Files also use the same encryption approach as chats, meaning any stored content remains inaccessible to third-parties.
Ghost mode can be enabled, which allows users to configure conversations to automatically delete. All chat history is stored in an encrypted vault, which is password protected.
Only a user, with knowledge of the password, can unlock it and we'd recommend using a secure and complex password for maximum security.
At launch, ExpressAI has five general-purpose AI models available for use:
- GPT OSS 120B – an open-weight model from OpenAI for everyday reasoning and writing.
- DeepSeek R1 Distill 32B – For problems that require careful thinking. Excels at multi-step reasoning, logic puzzles, and research analysis.
- Qwen2.5-VL 32B – Useful for reading documents, extracting data, and analyzing charts and diagrams.
- Qwen3.5 35B-A3B – a "smart and efficient" model for long and complex tasks. Excels at coding, multi-step reasoning, and multilingual tasks.
- Nemotron 12B – a powerful yet compact model designed by NVIDIA. It can be used for solving math problems, generating code, and tackling complex reasoning tasks.
Models can be run side-by-side for easy comparison. You can run the same prompt through multiple models and "benefit from a range of perspectives and reasoning styles."
"With ExpressAI, ExpressVPN is effectively extending its long-held stance on traffic protection to AI interactions: The best way to protect user data is not to collect it in the first place," said Shay Peretz, COO at ExpressVPN.
"We're not just making privacy claims – we're proving it with cryptographic guarantees. With our enclave architecture, your messages exist in a secure, isolated environment that even we can’t access. This is the future of reliable, private AI."
How to use ExpressAI
ExpressAI will first be available to ExpressVPN Pro subscribers, before being gradually rolled out to other subscribers. It can be used via its standalone web app – app.expressai.com.
You can personalize your experience by setting yourself a nickname, giving your occupation, and sharing interests, values, and preferences for models to keep in mind. You can also enter custom instructions dictating how models should behave and answer.
ExpressVPN Pro users will receive 500 daily credits, 2GB of storage, and access to the five AI models.
ExpressVPN confirmed that credits are used each time ExpressAI processes a request. It provided the following examples:
- 1 message using 1 model = 1 credit
- 1 message using 3 models = 3 credits
- 1 image or file upload = 1 credit
There's also no word on how this quota will eventually differ between ExpressVPN plans. The features available with its existing apps vary between plans, with premium plans unlocking more features. We'd expect this to be the same with ExpressAI.
Typically, a 28-month ExpressVPN Pro plan costs $7.49 per month. This is expensive for a VPN plan but considering you receive five apps, plus Dedicated IP, it's certainly not a bad price.
However, ExpressVPN's exclusive gaming deal still appears to be live. You can get two-year plans, with four months free, for a heavily discounted price. A 28-month ExpressVPN Pro plan costs $4.87 per month ($136.32 upfront pre-tax), which is incredible value.
We can't say how long the price will remain in place, but it's active at the time of writing. It's also worth noting that Identity Defender is a US-exclusive. If you want Dedicated IP or ExpressAI, ExpressVPN Pro is still worth the price. If you don't, you may be better off with ExpressVPN Basic or Advanced.
An immediate independent audit
ExpressAI is being released having undergone a successful independent audit. Cure53 completed its assessment between February and March 2026. It completed a source code review and penetration testing, across ExpressAI's frontend and backend systems. As well as this, Cure53 examined cryptography, key management, and underlying infrastructure.
According to ExpressVPN, "all identified security vulnerabilities by Cure53 were addressed and remediated ahead of launch."
Cure53 said ExpressAI "meets its stated privacy objectives," confirming its effective use of secure cryptographic enclaves.
One subscription, five privacy apps
ExpressAI is the final product to join ExpressVPN's newly launched privacy suite. Alongside ExpressVPN, you'll receive ExpressMailGuard, ExpressKeys, Identity Defender, and now ExpressAI.
Features and app availability vary between plans. At the time of writing, ExpressVPN Basic only comes with the VPN and ExpressMailGuard.
ExpressVPN Advanced unlocks ExpressKeys and core Identity Defender features. ExpressVPN Pro unlocks everything ExpressVPN has to offer, and is the only plan to include ExpressAI – for now.
We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.

George is a Staff Writer at Tom's Guide, covering VPN, privacy, and cybersecurity news. He is especially interested in digital rights and censorship, and its interplay with politics. Outside of work, George is passionate about music, Star Wars, and Karate.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.

