Does Prompt Injection Expose Customer Records?
Yes, when the injected agent sees real customer data and can send outward; attacks leaked data at 20 to 70 percent. Check what the model holds.
Research topic
FTC Safeguards Rule
Research on FTC Safeguards Rule: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.
How Do You Pilot an AI Agent on Real Customer Data Without Creating a Breach?
Run one workflow and one record type with a page policy that replaces identifiers, a named approver and a reviewed record. Check it completes on tokens.
What Happens to a Company When an AI Agent Leaks Customer PII?
Notification clocks, regulator reviews, fine tiers and contract consequences run in order, whether a person or agent caused it. Keep PII out of the model.