DLP & Privacy

Input masking before retrieval/LLM contact; privacy-law-aligned handling.

Sensitive data is masked before it reaches retrieval or an LLM. Data-loss prevention works as upstream blocking, not after-the-fact audit.

Training pipelines follow identical scrubbing discipline. Collection minimization and purpose limitation are defaults aligned with Korean privacy law (PIPA) principles.