Claims sit between:

The pipeline:

Attributes  →  Claim Templates  →  Vault Proof Engine  →  Verifiable Claim

Everything stays private - only proofs leave the device.