Abstract: The present disclosure relates to systems, non-transitory computer-readable media, and methods for executing generative models for private conversations within protected inference environments. In particular, in some embodiments, the disclosed systems receive an encrypted chat message marked with a private status. In addition, in some embodiments, the disclosed systems generate a decrypted chat message by decrypting the encrypted chat message using a shared session key based on a hardware-backed attestation indicating server-side processing by a trusted execution environment. Moreover, in some embodiments, the disclosed systems generate a re-encrypted chat message by re-encrypting the decrypted chat message with an additional session key established for a private engine instance.