Read the receipt.
A receipt helps you understand a particular attempt. It describes the route, protection and usage the app reports for that request.
Protection counts
A detected or masked count refers to the values the protection process identified. It is not a count of every sensitive fact in the source and it does not prove that nothing was missed.
With files, read the protected copy alongside the receipt. The reviewed text is the useful record of what you chose to send.
Route and cost
A cloud label means remote processing. A local route means the selected model ran through the local option, but optional online tools can still make requests.
Cloud usage and charges are shown when the attempt is settled. If an attempt fails or is stopped, check its final account record for the outcome.
What a receipt does not prove
Current receipts report application-observed behavior. They are not hardware attestations or proof that a provider did not retain data. Confidential hardware evidence belongs to the future Network roadmap.