Confidential Cloud is similar to end-to-end encryption, but with the added benefit of letting your personalized AI work for you even when you aren’t using the app.
You control who can decrypt your data
Your employer, we as software providers, and the government cannot decrypt your data without your permission, even with a subpoena to do so.
Your data is anonymized
There is an initial mapping from your application request to an anonymous ID, but after that, even we don't know whose encrypted data is whose.
Your data will never be sold
Not only do we pledge never to sell your data, but we couldn't even if we wanted to because we can't decrypt it without your permission.
Envelope encryption with unique secret keys
Data keys are used to encrypt your data and are themselves encrypted under a secret key. No one, including us, can export the secret keys.
Tamperproof hardware
Decrypted data is only ever stored in memory (source: <https://docs.aws.amazon.com/kms/latest/cryptographic-details...>), which is protected from tampering by a multi-chip standalone hardware cryptographic appliance (source: <https://csrc.nist.gov/projects/cryptographic-module-validati...>).
Protected from 3rd party AI providers
Data sent to 3rd party AI providers for transcription and summarization is anonymized, not used for training, and deleted after 30 days.
Protected from cloud provider and subpoena
AWS KMS (source: <https://aws.amazon.com/kms/>) uses FIPS 140-2 (source: <https://csrc.nist.gov/CSRC/media/projects/cryptographic-modu...>) validated hardware security modules (HSMs) to ensure no one, including AWS employees, can retrieve your plaintext KMS keys.
You control who can decrypt your data
Your employer, we as software providers, and the government cannot decrypt your data without your permission, even with a subpoena to do so.
Your data is anonymized
There is an initial mapping from your application request to an anonymous ID, but after that, even we don't know whose encrypted data is whose.
Your data will never be sold
Not only do we pledge never to sell your data, but we couldn't even if we wanted to because we can't decrypt it without your permission.
Envelope encryption with unique secret keys
Data keys are used to encrypt your data and are themselves encrypted under a secret key. No one, including us, can export the secret keys.
Tamperproof hardware
Decrypted data is only ever stored in memory (source: <https://docs.aws.amazon.com/kms/latest/cryptographic-details...>), which is protected from tampering by a multi-chip standalone hardware cryptographic appliance (source: <https://csrc.nist.gov/projects/cryptographic-module-validati...>).
Protected from 3rd party AI providers
Data sent to 3rd party AI providers for transcription and summarization is anonymized, not used for training, and deleted after 30 days.
Protected from cloud provider and subpoena
AWS KMS (source: <https://aws.amazon.com/kms/>) uses FIPS 140-2 (source: <https://csrc.nist.gov/CSRC/media/projects/cryptographic-modu...>) validated hardware security modules (HSMs) to ensure no one, including AWS employees, can retrieve your plaintext KMS keys.