Settings · AI privacy

AI PII minimization

Review PII minimization, direct-identifier tokenization, and restricted-data route blocks before any model payload is assembled.

Otto Fixture BPPE Career School · AI privacy

School Administrator · Sam Director

AI privacy · Ticket 113

Restricted data is stripped before AI use

This proof shows deterministic PII minimization before model payload construction: restricted data is redacted, direct identifiers are tokenized or removed, unneeded fields are omitted, and external routes are blocked when restricted source data is present.

AI settings Evals Guardrails Retrieval

Scenarios

Deterministic cases

Ready

Allowed after minimization

Blocked

Restricted route blocked

Pseudonymized

Identifier tokens

Redacted

Removed before payload

Signals

Free-text hits

PII minimization runs before model payloads

The minimizer runs before provider selection. It produces a sanitized payload and blocks any route that would carry restricted source data outside Otto Core.

Ticket 113

Restricted fields are redacted before a model payload is assembled.

Direct identifiers are tokenized or removed according to the model policy.

Otto Deep and external provider routes are blocked when restricted data is present.

Every field must keep a source reference so later AI runs can cite inputs without storing raw restricted values.

Unneeded fields are omitted even when their classification would otherwise be allowed.

Source fields

Legal name

legalName

direct identifier

Kind

legal name

Needed

Task relevant

Source

student-record:stu-101:profile

Student record id

studentId

direct identifier

Kind

student record id

Needed

Task relevant

Source

student-record:stu-101:profile

Attendance rate

attendanceRate

confidential education record

Kind

attendance

Needed

Task relevant

Source

attendance-summary:stu-101:2026-10

Grade trend

gradeTrend

confidential education record

Kind

grade

Needed

Task relevant

Source

gradebook:med-101:current

Program policy

programPolicy

internal

Kind

policy text

Needed

Task relevant

Source

policy:attendance-makeup

SSN

ssn

restricted

Kind

ssn

Needed

Not needed

Source

student-record:stu-101:identity

Payment card

paymentCard

restricted

Kind

payment card

Needed

Not needed

Source

student-ledger:stu-101:payment-method

Accommodation detail

accommodationNote

restricted

Kind

disability accommodation

Needed

Not needed

Source

student-record:stu-101:accommodations

Private advisor note

privateAdvisorNote

confidential education record

Kind

private note

Needed

Not needed

Source

private-note:stu-101:advisor

Minimization policies

ask_otto_staff_questions

otto_core · mock

tokens allowed

Allowed classes

direct identifier, confidential education record, internal, public

Source references

Required

ai_grading_drafts

otto_deep · openai

tokens allowed

Allowed classes

direct identifier, confidential education record, internal, public

Source references

Required

message_drafts

otto_core · mock

no identifiers

Allowed classes

confidential education record, internal, public

Source references

Required

Restricted-data block tests

Otto Core staff question

Allows a source-linked staff answer after direct identifiers are tokenized and restricted fields are removed.

ready

Feature

ask_otto_staff_questions

Tier

otto_core

Provider

mock

Sources

Field actions

Included

Attendance rate: Field is task-relevant and allowed by policy.

Grade trend: Field is task-relevant and allowed by policy.

Program policy: Field is task-relevant and allowed by policy.

Pseudonymized

Legal name: Direct identifier is tokenized before model use.

Student record id: Direct identifier is tokenized before model use.

Redacted

SSN: Restricted data is removed before model payload construction.

Payment card: Restricted data is removed before model payload construction.

Accommodation detail: Restricted data is removed before model payload construction.

Omitted

Private advisor note: Field is not needed for this task.

Sanitized model payload

legalName: legal_name_token_8da1de22
studentId: student_record_id_token_d586f261
attendanceRate: 93.3%
gradeTrend: Course average moved from 88% to 91%
programPolicy: Make-up hours must be scheduled by student services.

Otto Deep restricted-data block

Blocks an attempted Deep handoff because restricted data is present in the source set.

blocked

Feature

ai_grading_drafts

Tier

otto_deep

Provider

openai

Sources

restricted data cannot be routed outside Otto Core.

Field actions

Included

Attendance rate: Field is task-relevant and allowed by policy.

Grade trend: Field is task-relevant and allowed by policy.

Program policy: Field is task-relevant and allowed by policy.

Pseudonymized

Legal name: Direct identifier is tokenized before model use.

Student record id: Direct identifier is tokenized before model use.

Redacted

SSN: Restricted data is removed before model payload construction.

Payment card: Restricted data is removed before model payload construction.

Accommodation detail: Restricted data is removed before model payload construction.

Omitted

Private advisor note: Field is not needed for this task.

Sanitized model payload

legalName: legal_name_token_8da1de22
studentId: student_record_id_token_d586f261
attendanceRate: 93.3%
gradeTrend: Course average moved from 88% to 91%
programPolicy: Make-up hours must be scheduled by student services.

Message draft without identifiers

Builds a draft context from attendance and policy fields while omitting direct identifiers and private notes.

ready

Feature

message_drafts

Tier

otto_core

Provider

mock

Sources

Field actions

Included

Attendance rate: Field is task-relevant and allowed by policy.

Program policy: Field is task-relevant and allowed by policy.

Omitted

Legal name: direct_identifier is not allowed by the model policy.

Student record id: direct_identifier is not allowed by the model policy.

Private advisor note: Field is not needed for this task.

Sanitized model payload

attendanceRate: 93.3%
programPolicy: Make-up hours must be scheduled by student services.

Proof boundaries

This page uses local invented privacy proof data only.

It does not call Anthropic, OpenAI, Bedrock, embeddings, batch, file-retaining APIs, or Private AI.

No production PII scan, AI run, usage ledger row, audit event, student record, policy update, or provider request is written.

No SSN, government ID, card, bank, disability, health, private note, grade release, message send, refund, dismissal, admissions decision, or compliance conclusion is activated.

Sources

AI-R-003

Never send restricted data to models

SSNs, government IDs, bank or card numbers, and disability documentation stay out of model context.

AI-R-023

Restricted data stays in Core

Otto Deep receives only minimized and pseudonymized context; restricted data blocks the route.

PRIV-37.2

Data classification

Restricted, confidential education record, internal, and public classes drive handling.

Phase-13

Ticket 113

Adds PII minimization and restricted-data block tests after evals.