The problem
- Raw PII in every AI prompt.GDPR Art. 5 minimization principle violated.
- Vendor retains prompt data.Personal data stored by a third party.
- No audit trail for personal data.DSAR requests impossible to fulfill.
The solution
Personal data never reaches the model.
PII stripped and replaced with tokens at the edge before the prompt reaches any LLM. The response is de-anonymized on the return path. GDPR Art. 5 data minimization by design — the model never sees real identities.
GDPR Art. 5CCPALGPDData Minimization
GDPR Art. 5(1)(c)
"Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed — the data minimisation principle."