Is It Safe to Let Enterprise AI Agents Access Personally Identifiable Information?
Not if safety depends on the model judging when PII is appropriate to share, which fails a third to half the time. Check that controls act on what it gets.
Research topic
NIST SP 800-122
Research on NIST SP 800-122: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.