11/ Honest limits: this covers chat today. Image, video and audio still hit our backend directly; bringing them in is next.
Frontier providers like Anthropic still see your prompt, because that's where the model runs. For our E2EE models on tinfoil.sh, not even the provider does.