Does every call run in attested hardware?
No. Confidential is one of four levels, selected with a model’s:confidential variant. Frontier models run at Anonymous, open-weight models at Private. See Privacy levels.
How do I get the strongest level?
Choose a:confidential ID from GET /v1/models. For Encrypted, send the :encrypted ID with the Encrypted headers and encrypt the messages yourself.
What are the privacy levels?
Anonymous, Private, Confidential, and Encrypted. Each level builds on the last. See Privacy levels at a glance.Does Nito see my prompt?
At Anonymous, Private, and Confidential the prompt passes through Nito in transit and is never stored. At Encrypted, Nito relays ciphertext it cannot read. What each level protects: How Privacy Works.Can I verify the attestation myself?
Yes. Fetch the evidence for a Confidential request fromGET /api/v1/attestation with your own challenge, and verify it with the hardware maker’s tooling. Nito gathers the evidence, checks it is bound to the route, and hands it to you. The hardware verification is yours. See How Attestation Works.
Can I build my own Encrypted client?
Yes. Encrypted runs on Chat Completions with the:encrypted model and the nito-encrypted-* headers. Your client fetches the attestation, encrypts each message, and decrypts the reply. The wire protocol is on Protocol, and the reference page is Encrypted.