> isn't that what ZDR is for? (assuming you trust that)
ZDR is:
1. A pinky-promise you have no way of verifying
2. A contract term, which means its still subject to the good-old "lawful request or court order" clauses
3. Subject to arbitrary provider exceptions ... see Anthropic and Fable
What you really want (assuming you can't afford your own servers and datacentre space) is secure enclave processing:See Tinfoil (US)[1] or Privatemode (Germany)[2].
See the sibling comment, tinfoil added scanning inside the enclave.
> See the sibling comment, tinfoil added scanning inside the enclave.
Clearly I'm not defending tinfoil regarding scanning but I think its only fair that you do not make the statement out of context[1].
People should read the context[1] and come to their own decisions.
Also recall that given how attestation works, Tinfoil are forced to publish what they run in the enclave in their GitHub account[2] so you can verify the statement on their blog against their repo. You do not have that luxury with the closed-source "ZDR" brigade.
[1] https://tinfoil.sh/blog/2026-09-14-safety-without-compromisi... [2] https://github.com/tinfoilsh