> For the complete documentation index, see [llms.txt](https://handbook.harmonic.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://handbook.harmonic.security/handbook/4.-data-protection-and-residency.md).

# 4. Data Protection & Residency

How to control sensitive data in AI prompts, outputs, files, tools, and agent actions — including DLP, classification, residency, retention, and secrets hygiene.

*Last reviewed: August 18, 2026*

{% hint style="info" %}
AI tools create data exit points and derived stores that traditional DLP may not see: prompts, tool calls, outputs, embeddings, vector stores, caches, evaluation data, and cross-app artifacts. This section covers how to classify, control, retain, delete, and audit sensitive data across those paths.
{% endhint %}

## Articles in this section

1. [4.1 DLP for GenAI](/handbook/4.-data-protection-and-residency/4.1-dlp-for-genai.md)
2. [4.2 Data classification for AI prompts and outputs](/handbook/4.-data-protection-and-residency/4.2-data-classification-for-ai-prompts-and-outputs.md)
3. [4.3 Data residency and regional inference](/handbook/4.-data-protection-and-residency/4.3-data-residency-and-regional-inference.md)
4. [4.4 Retention and Zero Data Retention](/handbook/4.-data-protection-and-residency/4.4-retention-and-zero-data-retention.md)
5. [4.5 Training opt-out and data usage](/handbook/4.-data-protection-and-residency/4.5-training-opt-out-and-data-usage.md)
6. [4.6 Cross-app data flow and live artifacts](/handbook/4.-data-protection-and-residency/4.6-cross-app-data-flow-and-live-artifacts.md)
7. [4.7 Secrets and credential hygiene in prompts and tools](/handbook/4.-data-protection-and-residency/4.7-secrets-and-credential-hygiene-in-prompts-and-tools.md)

## Frequently asked questions

**Why doesn't traditional DLP protect against AI data leakage?**\
Traditional DLP can inspect files and traffic on the channels it covers, but AI introduces paths that many deployments do not inspect: pasted prompts, uploads, native desktop clients, API requests, tool calls, connectors, and agent-generated actions. The gap is coverage, not that DLP is inherently unable to recognize sensitive data. Map each AI surface to an enforcement point, then test browser, endpoint, API, and agent paths separately.

**What data types are most commonly exposed through AI tools?**\
Prioritize credentials and secrets, source code, customer and employee personal data, financial information, legal and contract material, and internal strategy or product documents. Do not treat this as a universal ranking; exposure patterns depend on the organization, workforce, and tools. Use pilot and production telemetry to tune policies around the data users actually submit.

**Does Zero Data Retention mean my data never touches the vendor's infrastructure?**\
Not necessarily. Zero Data Retention generally means eligible customer content is not retained after processing under vendor-specific terms. The data still transits vendor infrastructure, and some endpoints or features may retain application state or be ineligible for ZDR. Metadata, third-party tools and connectors, files, background jobs, and customer-controlled storage can follow different rules. Verify scope by product, endpoint, region, and subprocessor before treating ZDR as a control.

**What AI data stores need separate lifecycle controls?**\
Include source documents, uploads, knowledge bases, embeddings, vector stores, fine-tuning and evaluation datasets, provider caches, temporary files, backups, traces, compliance exports, and generated artifacts. Define an owner, region, retention period, access model, deletion path, and verification method for each store.

## Related handbook guidance

* [AI Security Handbook](/ai-security-handbook.md)
* [2.6 AI hooks: inference controls and lifecycle automation](/handbook/2.-supply-chain-and-extensibility/2.6-ai-hooks-inference-controls-and-lifecycle-automation.md)
* [5.2 Data exfiltration via tools and connectors](/handbook/5.-threats-and-adversarial/5.2-data-exfiltration-via-tools-and-connectors.md)
* [6.3 Compliance APIs by platform](/handbook/6.-observability-audit-and-evidence/6.3-compliance-apis-by-platform.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://handbook.harmonic.security/handbook/4.-data-protection-and-residency.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.