Agent WranglersAI agents and models Recommended
Send models only the private data they need
Send a model provider only the personal data a task needs, under terms that forbid training on it.
How to do it
Remove or mask names, emails, card numbers and health data before they reach the prompt, where the task allows. Choose a provider plan with no training on your data and a short retention period. Name the provider in your privacy policy.
How to check
Log the prompts sent for a test conversation. They contain no data the task did not need, such as full card numbers or other customers' details.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/ai-agents-and-models/private-data-to-models.