The details of their approach: https://security.apple.com/blog/private-cloud-compute/