Privacy Levels at a Glance

Every model carries a privacy level, and the level comes with the model. The full treatment is in Privacy.

The Four Levels

Level	How you reach it	Description (each level builds on the last)
Anonymous	Choose an Anonymous model	Frontier models, with no identity attached to the request.
Private	Choose a Private model	Open-weight models with zero data retention upstream.
Confidential	Choose a `:confidential` model	Runs inside sealed hardware, with attestation you can verify on every request.
Encrypted	Choose an `:encrypted` model	Runs inside the same sealed hardware as Confidential, with prompt and response encrypted on your device on the way in and out.

Zero data retention: the provider’s setting that requires it to keep nothing once a request is served. Trusted Execution Environment (TEE): sealed hardware that keeps the provider’s operator out of the memory the model runs in, and produces an attestation you can check. What each level protects: How Privacy Works.

Where Each Level Is Available

Level	Browser App	Plugin	API
Anonymous	✓	✓	✓
Private	✓	✓	✓
Confidential	✓	✓	✓
Encrypted	✓	Coming soon	✓

No Silent Downgrade

A call the model cannot serve at its level fails with a clear message. When a call at a stronger level succeeds, it ran at that level.

Private and Confidential

Private holds the provider to zero data retention. Confidential adds sealed hardware and attestation evidence you can verify yourself. See How Attestation Works.

Privacy Levels

Each level in depth.

Model List

Which models sit at which level.

Model ID Convention

How a name shows its level.

​The Four Levels

​Where Each Level Is Available

​No Silent Downgrade

​Private and Confidential

​Related