Encryption

Encryption transforms readable data into a protected representation using a cryptographic scheme and key material. Authorized decryption recovers the plaintext. It can protect stored data and data in transit, but does not decide whether a use is appropriate.

The recipient still sees the plaintext

An encrypted connection can protect a transcript while it travels to an AI service. The receiving service may then decrypt and process it. Encryption in transit therefore does not establish that the provider stores nothing or that no sensitive text reaches the model.

Stored ciphertext also depends on key protection. Copying a usable decryption key beside the encrypted data can defeat the intended separation.

Protect keys and limit release

Control key access, use suitable established mechanisms, and distinguish human and service permissions. Encryption is not anonymization: recoverable identifiers remain identifiable to a party able to decrypt them. Masking a screen and deleting a record are different operations with different evidence requirements.

Reference: NIST SP 800-188.