# Thoughts on confer.to? - AI by the creator of Signal

**URL:** https://discuss.privacyguides.net/t/thoughts-on-confer-to-ai-by-the-creator-of-signal/41574
**Category:** Questions
**Created:** 2026-10-19T04:13:44Z
**Posts:** 4

## Post 1 by @not-wittingly — 2026-10-19T04:13:44Z

Both in terms of the models performance and in terms of it’s security architecture. Seems to be the most secure remote AI available today, much more so than Lumo, as it runs in a TEE.

Is this something you would trust with sensitive information?

---

## Post 2 by @blibly — 2026-10-19T04:50:58Z

What’s a TEE?

---

## Post 3 by @not-wittingly — 2026-10-19T04:54:13Z

It’s a [trusted execution environment.](https://en.wikipedia.org/wiki/Trusted_execution_environment)

This means your query, though plain text, is processed in a hardware isolated environment which means it should be impractical to exfiltrate. I think confer.to has some cryptographic handshake it does to ensure this hardware separation is taking place before every query is sent off. The chat history is then e2ee, but that’s the easy part. It’s the processing where the difficulty lies.

---

## Post 4 by @CleverOrca95 — 2026-10-19T09:47:39Z

The TEE approach sounds promising, but I think I’d still want to know how independently verifiable the setup is before trusting it with anything really sensitive. Hardware isolation is one thing, being able to verify what’s actually running inside it is another. Curious how transparent Confer is about that part.
