LLMs have text only as input. Nothing can be truely encrypted, best you can ask for is to have the stuff on prem and friend audited to make sure the CEO doesn't literally read everything like the LLM.
Turns out the real friend was the one who read it along the way