Classify the material
Name the data categories and the person authorized to decide where they can go. An attractive interface does not change the sensitivity of the document.
Trace the full route
Account for upload, extraction, storage, prompts, model execution, output, logs, and exports. Review each destination rather than only the main model provider.
Make policy enforceable
Put consent and routing checks on the actual execution path. A written policy that no request evaluates cannot enforce a data boundary.
Retain human review
Decide who reviews a result, what evidence they need, and how corrections remain traceable. Test the stop path when required context is missing.
A concrete starting point.
A document marked for a local-only route should stop before a hosted model call, with a clear reason and an inspectable audit event.
Your working checklist.
Mark what you have considered. This checklist stays on this page and is cleared when you reload.
Explore the related work.
General engineering guidance, not a certification, service agreement, or product-specific acceptance report.
Back to all field notes ↗