A computing system remotely trains a public ensemble model of an artificial intelligence model management system. The system receives, by the model management system, an encrypted representation of a private data value from a client system. The encrypted representation includes annotation information provided by the client system. The system determines, using the encrypted representation and the annotation information, a data value cluster that corresponds to the private data value. Data value clusters are generated using encrypted representations of a private data values provided by client systems. The system obtains, based on the assigned data value cluster, an encrypted representation of a model. The model is trained remotely by the client system using the private data value. The system adds the encrypted representation of the model to the public ensemble model. The public ensemble model is generated using a plurality of encrypted representations of models remotely trained by the client systems.