Brave Software · feature_addedVerifiable confidential computing for Leo

valid_from

2026-10-15

valid_to

null (still holds)

confidence

0.70

superseded_by

null

first seen

2026-10-28

last updated

2026-10-28

Sources

“Leo chats with the open-weight GLM 5.3 Flash model are now end-to-end encrypted with Oblivious HTTP and run inside attested, Nvidia-backed Trusted Execution Environments, so even Brave can't read them, and you can verify it.”— what the source said

• Another Brave User-First AI Win: Leo adds End-to-end Encryption, Oblivious HTTP, and Verifiable Confidential Computingprimary · brave.com

/claim/clm_781A28F7253E.md/v1/claims/clm_781A28F7253Etimelinesubmit a correction