> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trynito.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Encrypted Inference

> End-to-end encrypted inference: the prompt is encrypted on your device, relayed as ciphertext, and decrypted only inside sealed hardware.

Encrypted is Nito's end-to-end encrypted inference level. Your prompt is encrypted on your device with a key that only the sealed hardware can undo, Nito relays ciphertext it cannot read, the model runs inside that hardware, and the reply comes back encrypted and is decrypted on your device. Plaintext exists in two places: your device and the sealed hardware.

## The Path

```mermaid theme={"theme":{"light":"github-light","dark":"github-dark"}}
sequenceDiagram
    participant You as Your device
    participant Nito
    participant TEE as Sealed hardware
    You->>Nito: Attestation request with your challenge
    Nito->>TEE: Fetch evidence
    TEE-->>Nito: Evidence and model public key
    Nito-->>You: Evidence and key
    Note over You: Check the evidence. Encrypt the prompt.
    You->>Nito: Ciphertext and Encrypted headers
    Nito->>TEE: Ciphertext, relayed unread
    Note over TEE: Decrypt, run the model, encrypt the reply
    TEE-->>Nito: Ciphertext
    Nito-->>You: Ciphertext
    Note over You: Decrypt the reply.
```

## What Stays Private

| | At Encrypted |
| :- | :- |
| **On your device** | The prompt is encrypted before it leaves and the reply is decrypted after it arrives. |
| **Through Nito** | Nito relays ciphertext it cannot read, and stores nothing. |
| **At the provider** | The sealed hardware keeps the provider's operator out. The private key exists only inside it. |
| **The model** | Reads the prompt inside the sealed hardware, where it answers. |

Availability by surface, the models that offer it, and how to pick it are on the [Encrypted level page](/privacy/levels/encrypted).

## In This Section

<CardGroup cols={2}>
  <Card title="How It Works" icon="arrows-left-right-to-line" href="/privacy/encrypted/how-it-works">
    The call, step by step.
  </Card>

  <Card title="What It Protects" icon="shield-halved" href="/privacy/encrypted/what-it-protects">
    What stays private, what it relies on, and what sits outside the envelope.
  </Card>

  <Card title="What Works at Encrypted" icon="list-check" href="/privacy/encrypted/what-works">
    Streaming, reasoning, tools, files, search, and Fusion.
  </Card>

  <Card title="Protocol" icon="code" href="/privacy/encrypted/protocol">
    Keys, ciphers, the envelope, and the headers, for building your own client.
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.