Send
Only the cloaked content (tokens, never raw values) reaches the AI provider — exactly what you see on the “Cloaked” tab.
Restore
The provider’s reply is rehydrated with your originals inside your environment, so you read a normal answer while the provider never saw the real data.
Where you see them
Your Dashboard tallies Sent and Restored. No raw value ever leaves; the gateway enforces this.