What Shipped
ExpressVPN released three tools on February 5 that expand its VPN service into a broader privacy suite:
ExpressAI: A private AI chatbot with 50 daily credits, launching soon via web and mobile apps. Uses confidential computing enclaves to isolate user data from staff, infrastructure, and model training. Supports five models at launch (GPTOSS 20B, DeepSeek R1 Distill, Qwen2-VL 2B, Qwen3 32B, NVIDIA Nemotron). Messages auto-delete, chat history requires user-set password that ExpressVPN can't access.
ExpressKeys: Standalone password manager now on iOS and Android. Replaces the limited integrated version.
ExpressMailGuard: Unlimited email aliases for inbox protection.
All three roll across Basic (10 devices), Advanced (12 devices, tracker blocking), and Pro (14 devices, dedicated IP) plans. Legacy users upgraded for free.
Why This Matters
ExpressVPN is following NordVPN's playbook: build a privacy ecosystem, not just a VPN. The AI assistant is the notable piece. Most enterprise security teams treat AI tools as data exfiltration risks because prompts feed back into vendor training pipelines. ExpressVPN's enclave architecture addresses this by making data non-collectible by design, including from their own infrastructure.
For IT leaders evaluating remote work tools, this matters: employees are already using ChatGPT and Claude for work tasks. An AI assistant with verifiable data isolation might be preferable to shadow IT.
The password manager and email aliases are table stakes, catching up to competitors rather than leaping ahead.
The Deadline
Legacy ExpressVPN apps stop working March 31, 2026. Users on old versions risk exposure after that date. This isn't optional, it's a forced migration.
The Context
ExpressVPN operates 105-country server network, supports up to 14 simultaneous connections, includes post-quantum encryption and TrustedServer no-logs infrastructure. The company positions this as filling the trust gap in AI adoption: COO Shay Peretz says it removes the tradeoff between AI capability and privacy.
The real test: whether enterprise customers see enough value to adopt ExpressVPN's business tier instead of managing separate VPN, password, and AI tool vendors. The enclave architecture is interesting. Whether it's enough to change procurement decisions is the question.