[puttycat]

> Every request is end-to-end encrypted

Afaik you will need to decrypt the data the moment it needs to be fed into the model.

How do they do this then?

[mr_mitm]

The system hosting the model must be one of the ends.

Remember, all encryption is E2EE if you're not picky about the ends.