Brave adds end-to-end encryption of prompts with a trusted execution environment to its Leo assistant
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
There is now a way to use an SI chat so that even the provider doesn't see the text of your prompts — at least according to Brave.
According to The Register (the article is paywalled; the facts are given in retelling): prompts are encrypted on the device, travel through Oblivious HTTP, which hides the IP address, and are decrypted only inside a trusted execution environment (TEE) on Intel TDX and Nvidia Confidential Compute hardware after attestation is verified. The mode runs Z.ai's GLM 5.3 Flash model; search through the Brave Search API also runs inside the TEE. Responses are signed so users can verify the model. Planned: in-browser verification, publication of TEE key logs and attestation of the weights loaded into memory.
Sources 1