Brave Leo adds verifiable encrypted LLM inference via TEEs, calls ZDR clauses a pinky promise

gnukeith · x · 2026-11-14

Brave announced that Leo, its in-browser AI assistant, now supports end-to-end encryption, Oblivious HTTP, and verifiable confidential computing: prompts are encrypted on-device before leaving the browser, and only a cryptographically attested Trusted Execution Environment can decrypt them for confidential LLM inference, with model and code integrity publicly auditable. Conversations run on the open-weight GLM model.

In the quoted context, Brendan Eich and gnukeith use this to argue that zero-data-retention (ZDR) clauses are a "pinky promise" not to be trusted — citing claims that Notion's provider Fireworks retained data despite a ZDR clause — and that the only verifiable ZDR runs in TEEs with open-source code you can actually verify.

Original post →

More from Infra

Infra channel →