> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trynito.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy and Attestation

> Privacy levels, attestation, and retention.

#### Does every call run in attested hardware?

No. Confidential is one of four levels, selected with a model's `:confidential` variant. Frontier models run at Anonymous, open-weight models at Private. See [Privacy levels](/privacy/levels).

#### How do I get the strongest level?

Choose a `:confidential` ID from `GET /v1/models`. For [Encrypted](/api/api-reference/chat-and-text/encrypted), send the `:encrypted` ID with the Encrypted headers and encrypt the messages yourself.

#### What are the privacy levels?

Anonymous, Private, Confidential, and Encrypted. Each level builds on the last. See [Privacy levels at a glance](/models/privacy-levels-at-a-glance).

#### Does Nito see my prompt?

At Anonymous, Private, and Confidential the prompt passes through Nito in transit and is never stored. At Encrypted, Nito relays ciphertext it cannot read. What each level protects: [How Privacy Works](/privacy/overview).

#### Can I verify the attestation myself?

Yes. Fetch the evidence for a Confidential request from `GET /api/v1/attestation` with your own challenge, and verify it with the hardware maker's tooling. Nito gathers the evidence, checks it is bound to the route, and hands it to you. The hardware verification is yours. See [How Attestation Works](/privacy/tee-attestation/how-attestation-works).

#### Can I build my own Encrypted client?

Yes. Encrypted runs on Chat Completions with the `:encrypted` model and the `nito-encrypted-*` headers. Your client fetches the attestation, encrypts each message, and decrypts the reply. The wire protocol is on [Protocol](/privacy/encrypted/protocol), and the reference page is [Encrypted](/api/api-reference/chat-and-text/encrypted).

#### Why is `verified` always `false`?

Because Nito does not run a verifier. The field stays in the envelope for compatibility with older clients. A result from Nito is attested and verifiable. It becomes verified when you check the evidence. See [Verify it yourself](/privacy/tee-attestation/verify-yourself-recipe).

#### Does Nito store my prompts?

No. Nito stores nothing you send or receive: no prompts, responses, reasoning, tool arguments, or attestation evidence. See [Data retention and visibility](/privacy/data-retention-and-visibility).

#### Does a `:confidential` call ever fall back to an ordinary route?

No. A privacy level never silently downgrades. If a Confidential call cannot be served attested, it fails.

## Related

* [Privacy overview](/privacy/overview)
* [How Attestation Works](/privacy/tee-attestation/how-attestation-works)
* [Verify it yourself](/privacy/tee-attestation/verify-yourself-recipe)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.