
Can an AI Agent Complete Its Task Without Seeing PII When Prisma AIRS Protects It at Inference?
Not by inference-time inspection alone: Prisma AIRS sees PII after the page is read. Check that values are replaced before the model reads the screen.
Research topic
Research on PII: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.

Not by inference-time inspection alone: Prisma AIRS sees PII after the page is read. Check that values are replaced before the model reads the screen.

They can, if the model never receives nonpublic personal information: identifiers are tokenized on screen and resolve only at approved destinations.

Mask employee fields on the rendered screen before the model reads it, not by repairing every inherited permission first. Check a manager login's view.

Not if safety depends on the model judging when PII is appropriate to share, which fails a third to half the time. Check that controls act on what it gets.

Ask what the model receives when the agent opens a screen full of identifiers, then who approves, what is recorded and where values resolve. Seek tokens.