Since when there is private key in AES? And that requires a paranoid person to trust that a company does not holds the keys in escrows somewhere or are by any w

Since when there is private key in AES? And that requires a paranoid person to trust that a company does not holds the keys in escrows somewhere or are by any way retrievable.