Privacy Levels

The Ladder

Each level builds on the last.

Level	How you reach it	Description (each level builds on the last)
Anonymous	Pick a model whose level is Anonymous	Frontier models, with no identity attached to the request
Private	Pick a model whose level is Private	Open-weight models with zero data retention upstream
Confidential	Pick a model’s `:confidential` entry	Runs inside sealed hardware, with attestation you can verify on every request
Encrypted	Pick a model’s `:encrypted` entry	Runs inside the same sealed hardware as Confidential, with prompt and response encrypted on your device on the way in and out

What Each Level Protects Against

Level	Protects against	Rests on
Anonymous	Frontier model providers logging your requests against your identity	The request reaching the provider under Nito’s account, with no account, key, or network address of yours in it
Private	The provider keeping the request after serving it	The provider’s zero-data-retention setting, sent on every call, and Nito listing a model at Private only where the provider offers it
Confidential	The provider’s operator, its host system, or its cloud reading the request while the model runs	Hardware isolation, with attestation evidence you can verify
Encrypted	Anyone between your device and the sealed hardware reading the request, Nito included	Encryption on your device that only the sealed hardware can undo

Anonymous and Private rest on how the provider is called and what it commits to. Confidential and Encrypted rest on hardware you can check.

The Level Follows the Model

The level is part of the model’s name. Anonymous and Private are a model’s own level. A model that also offers a stronger level gets a separate catalog entry ending in :confidential or :encrypted:

z-ai/glm-5.2                 the Private entry
z-ai/glm-5.2:confidential    the Confidential entry
z-ai/glm-5.2:encrypted       the Encrypted entry

You pick the level by picking the entry. See Model ID Convention. In the Browser App the picker shows the level on every row. In the Plugin, /nito:models lists entries with their level and /nito:model sets the one you keep. On the API, the model field carries the entry.

Where Each Level Is Available

Level	Browser App	Plugin	API
Anonymous	✓	✓	✓
Private	✓	✓	✓
Confidential	✓	✓	✓
Encrypted	✓	Coming soon	✓

Which Levels a Model Offers

The ladder reflects what can be enforced on a model, not quality.

Open-weight models run at Private, and many also have Confidential and Encrypted entries. The Model List shows which levels each model offers.
Frontier models always route through their maker. What can be done is detach your identity from the request. That is Anonymous, and it is as far as a frontier model goes.

No Silent Downgrade

A call the model cannot serve at its level fails with a clear message. When a call at a stronger level succeeds, it ran at that level.

The Four Pages

Anonymous

Frontier models, no identity attached.

Private

Zero data retention upstream.

Confidential

Sealed hardware with attestation you can verify.

Encrypted

Encryption on your device, on top of Confidential.

​The Ladder

​What Each Level Protects Against

​The Level Follows the Model

​Where Each Level Is Available

​Which Levels a Model Offers

​No Silent Downgrade

​The Four Pages