You control tokenization. But the system able to tell you what those tokens means is the very one you're feeding the tokens to.