According to the article: >Data and conversations originating from users and the resulting responses from the LLMs are encrypted in a trusted execution environ

According to the article: >Data and conversations originating from users and the resulting responses from the LLMs are encrypted in a trusted execution environment (TEE) that prevents even server administrators from peeking at or tampering with them. I think what they meant to say is that data is decrypted only in a trusted execution environment, and otherwise is stored/transmitted in an encrypted format.