> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trynito.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Encrypted

> Client-side encryption to the sealed environment, on top of Confidential. Coming soon to the plugin.

<Note>
  **Encrypted is coming soon to the plugin.** This release of the plugin and the `nito` command line tool cannot run a call at this level. Choosing an `:encrypted` model returns a message asking you to pick an Anonymous, Private, or Confidential model instead. [Confidential](/privacy/levels/confidential) is the strongest level you can use today.
</Note>

Encrypted adds **client-side end-to-end encryption** to sealed execution. Your data is encrypted on your own machine against the attested key, so it can be read only inside the sealed environment that runs the computation.

## What You Get

* Everything [Confidential](/privacy/levels/confidential) gives you, including the attestation and the baseline verification.
* **Encryption that reaches the sealed environment** rather than stopping at the edge of the system.

## The Constraints

Encrypting end to end to a sealed environment rules out anything that would need to read or transform your request along the way. At this level these are unavailable:

* **Streaming.** Output arrives as one complete response.
* Reasoning
* Tools
* Prompt caching
* Multi-part messages

Use [Confidential](/privacy/levels/confidential) when you need any of them.

## How to Pick It

Not yet. The client checks the level before it routes anything, so an `:encrypted` model is refused:

```text theme={"theme":{"light":"github-light","dark":"github-dark"},"languages":{"custom":["typescript","python","curl"]}}
requires Encrypted TEE client support, which is not included in this Nito
plugin and CLI release; choose an Anon, Private, or Confidential model
```

When it ships you will pick it the way you pick any model, by choosing a catalog entry whose name ends in `:encrypted`.

## When to Use It

The most sensitive single-shot requests, where end-to-end confidentiality is worth doing without streaming and tools.

## Related Resources

<CardGroup cols={3}>
  <Card title="Confidential Level" icon="file-award" href="/privacy/levels/confidential">
    Sealed execution with an attestation, available today.
  </Card>

  <Card title="TEE Attestation" icon="stamp" href="/privacy/tee-attestation">
    How attestation works, end to end.
  </Card>

  <Card title="Privacy Levels in Depth" icon="square-list" href="/privacy/levels">
    All four levels, and how each is chosen.
  </Card>
</CardGroup>