# Fidaro

> Fidaro is privacy-first, zero-knowledge AI chat. Conversations are end-to-end
> encrypted between your device and a hardware-attested confidential virtual
> machine (CVM); Fidaro's own servers cannot read message content, cannot tie
> your identity to what you said, and do not use conversations to train models.

Fidaro is built by a team including ExpressVPN alumni. The product runs
open-weight LLMs on Fidaro's own hardware inside Intel TDX confidential
computing, verified by cryptographic attestation before any message is sent.
Fidaro automatically routes each conversation to the best model for the task;
conversations are never proxied to the models' creators.

Product capabilities include Projects (a dedicated space that groups related
chats and carries its own instructions shaping every chat inside it; the project
name, description, and instructions are end-to-end encrypted like message
content), image and document uploads (encrypted in transit, not retained today —
encrypted file storage is planned), Disappearing Chat, and encrypted chat history
synced across devices.

## Core pages

- [How Fidaro Works](https://fidaro.ai/how-it-works/): The full architecture —
  confidential computing (CVM), attestation, Passkey-derived encryption keys,
  in-flight Noise-protocol encryption, and encrypted storage.
- [Why Fidaro](https://fidaro.ai/why-fidaro/): The privacy and confidentiality
  risks of mainstream AI chatbots and how Fidaro's architecture addresses each one.
- [Meet the Team](https://fidaro.ai/meet-the-team/): Founders and engineers,
  including background building ExpressVPN's TrustedServer platform.
- [Privacy Policy](https://fidaro.ai/privacy-policy/): What data Fidaro
  collects, what it structurally cannot access, and why.
- [Terms of Service](https://fidaro.ai/terms-of-service/): Terms of use.

## Key definitions

- **Zero-knowledge**: Fidaro's servers cannot read your conversations. Prompts
  and responses are never logged or stored in readable form — synced history
  exists only as end-to-end encrypted data Fidaro cannot decrypt — and
  conversations are never used to train AI models.
- **End-to-end encryption (E2EE)**: Messages are encrypted on the user's
  device, with keys derived from the user's passkey, before they are sent or
  stored. Only the user's devices and the attested CVM can decrypt them —
  Fidaro's servers, its staff, and the models' creators never hold the keys or
  readable content.
- **Confidential computing / CVM**: A Confidential Virtual Machine is a server
  whose memory is encrypted by the processor itself (Intel TDX), so that even
  Fidaro's own infrastructure operators cannot see data being processed inside it.
- **Attestation**: A cryptographic report, signed by the processor, that proves
  to a connecting device that it is talking to the genuine, unmodified CVM
  before any sensitive data is sent — verified against Intel's certificates and
  Fidaro's published code measurements.

## Optional

- [llms-full.txt](https://fidaro.ai/llms-full.txt): The complete text content
  of the site in one document — architecture explainers, risk comparisons,
  FAQs, blog posts, team, and legal pages.