{"id":14732,"date":"2026-10-24T18:02:43","date_gmt":"2026-10-24T16:02:43","guid":{"rendered":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/"},"modified":"2026-10-24T18:18:09","modified_gmt":"2026-10-24T16:18:09","slug":"ai-agents-confidential-data-instructions-not-enough","status":"publish","type":"post","link":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en","title":{"rendered":"AI agents and confidential data: why instructions are not enough"},"content":{"rendered":"<style>body.postid-14732 h3.entry-title.mkdf-post-title{display:none!important}@media(max-width:768px){body.postid-14732 #menu-icon{position:absolute!important}body.postid-14732 #mkdf-back-to-top{display:none!important}}<\/style>\n<article lang=\"en\">\n<h1>AI agents and confidential data: why instructions are not enough<\/h1>\n<p>Consider a fictional example. A sales manager asks an AI agent to research public information before a client meeting. The agent can also read the client file. To make its search more specific, it includes the client\u2019s name and a confidential negotiation detail in a web query. No email is sent. No document is shared. Yet that information has just left the business.<\/p>\n<p><strong>Permission to browse the Internet is not permission to disclose a client file.<\/strong> Confidentiality instructions help a model respect that distinction. They do not replace controls enforced by its tools and environment over the data it can access, the information it can transmit and the approvals it needs.<\/p>\n<h2>A web search can itself disclose information<\/h2>\n<p>When a team describes an assistant as \u201cread-only\u201d, it often means the assistant cannot change records. But searching the web involves sending a request to an outside service. If the query includes internal information, that information reaches the service even if the agent only opens public pages afterwards.<\/p>\n<p>The useful question is not just \u201ccan it send emails?\u201d. It is \u201cwhat can its tools send out, and to whom?\u201d. A search, connector or analysis service can carry confidential context without attaching a file. Controls need to cover those exchanges, not merely the visible send buttons.<\/p>\n<p>Our <a href=\"https:\/\/say-digital.io\/blog\/hermes-agent-guide-ai-agents-business\/?lang=en\">business guide to AI agents<\/a> explains the distinction between generating an answer and using tools to act. Once tools are involved, the task needs enforceable permissions rather than a broad promise of responsible behaviour.<\/p>\n<h2>\u201cNever disclose confidential data\u201d is useful guidance, not a lock<\/h2>\n<p>An agent needs clear rules: which files to consult, which information to leave out and when to ask for approval. Without them, an overly specific search may look like a helpful way to complete the task. The mistake is not writing instructions. It is treating those instructions as a security boundary.<\/p>\n<p>Claude Code\u2019s documentation makes this explicit for <code>CLAUDE.md<\/code> files and automatic memory: they provide context, not enforced configuration. That is a documented distinction for this product, and a useful question for any supplier: <strong>if the model proposes an action that breaks the rule, what actually stops it?<\/strong><\/p>\n<p>A page the agent reads may also contain instructions designed to divert it. This is prompt injection: content that should be treated as information attempts to direct the assistant\u2019s behaviour. An attacker is not required for every leak, however. OpenAI also describes accidental disclosure, where an agent shares more private data with a connected tool than the user expected.<\/p>\n<p>Our article on the <a href=\"https:\/\/say-digital.io\/blog\/reddit-comment-ai-assistant-business-risk-triangle\/?lang=en\">AI assistant risk triangle<\/a> examines the combination of private data, outside content and a route for sending information out. Here, the less obvious point is that the search tool can already provide that route.<\/p>\n<h2>Four controls to ask for before connecting client files<\/h2>\n<h3>1. Access limited to the actual task<\/h3>\n<p>Comparing public offers does not require access to the entire sales portfolio. If a summary needs internal context, the agent should only be able to read the documents required for that task. A manager may legitimately work across twenty clients; the agent preparing tomorrow\u2019s meeting does not therefore need access to all twenty files.<\/p>\n<h3>2. Checks on both the destination and the data<\/h3>\n<p>A domain allowlist narrows the possible destinations. It does not determine what information may be sent to them. An approved search engine is still an outside service: approving it should not permit unrestricted disclosure of contract details.<\/p>\n<p>Ask what is checked before information leaves: the destination, the permitted content and the purpose of the task. If the environment cannot enforce the boundary you need, reduce the information available to the agent or separate public research from confidential analysis.<\/p>\n<h3>3. Approval that shows what will leave<\/h3>\n<p>For a sensitive action, \u201callow this tool\u201d is too vague. The reviewer needs to understand which information will be transmitted, who will receive it and why it is needed. Approval must happen before transmission, not after the result arrives. Without those details, the team cannot make an informed decision.<\/p>\n<h3>4. Evidence that does not copy the whole file into logs<\/h3>\n<p>The team needs to trace the tool used, the destination, the authorisation decision and any refusals. That does not justify copying all confidential content into technical logs. Access to those records and their retention need limits too. The business owner should also know who can suspend the agent if something goes wrong.<\/p>\n<h2>Does running the model locally solve this?<\/h2>\n<p>Running a model on equipment under your control can avoid sending its context to a remote model provider. It does not close connected tools. A local agent that calls a web service still sends that service a request. Model hosting and control over outgoing information are separate decisions.<\/p>\n<p>Our <a href=\"https:\/\/say-digital.io\/blog\/lm-studio-local-ai-guide-installation-privacy\/?lang=en\">LM Studio guide to local AI<\/a> explains what local execution changes. Protecting a client file also requires checking connectors, supporting services and logs rather than assuming that \u201clocal\u201d describes the entire workflow.<\/p>\n<p><!-- SAY-HERMES-CROSSVIEW-START --><\/p>\n<section id=\"say-hermes-crossview\">\n<h2>A closer look: why we favour Hermes Agent for a controlled business deployment<\/h2>\n<p>If confidentiality depends on the execution environment, choosing the model that writes the best summary is not enough. <strong>At Say Digital, Hermes Agent is a framework we favour when building a business agent whose operation the company can shape.<\/strong> The open-source framework lets you choose where the agent runs and which model provider it uses. Our <a href=\"https:\/\/say-digital.io\/blog\/hermes-agent-guide-ai-agents-business\/?lang=en\">business guide to Hermes Agent<\/a> explains the distinction between the model, connected tools and human responsibility.<\/p>\n<p>The point is not to replace a Claude instruction with a Hermes instruction. Claude Code focuses on software development; Hermes can provide an execution layer for business tasks spanning several tools. Their uses overlap, but this is not a security ranking. The practical benefit is the ability to make explicit choices:<\/p>\n<ul>\n<li><strong>Hosting and model:<\/strong> choose the agent\u2019s environment, then decide separately whether a remote or local model fits the sensitivity of the work.<\/li>\n<li><strong>Lasting context and procedures:<\/strong> retain useful instructions and reuse \u201cskills\u201d, procedures the team can review, test and revise. That memory is itself potentially sensitive information and needs governance.<\/li>\n<li><strong>Permissions and evidence:<\/strong> define connected accounts, allowed operations, approvals and the records needed to review actions. Tools and the environment must enforce those controls; a remembered procedure does not enforce them.<\/li>\n<\/ul>\n<p>The <a href=\"https:\/\/github.com\/NousResearch\/hermes-agent#readme\">official Hermes Agent repository<\/a> documents its deployment options, model choice and reusable knowledge mechanisms. These provide an adaptable foundation, not automatic protection: a self-hosted agent may still send context to a remote model or a web search service. Logs should make actions understandable without unnecessarily copying confidential files.<\/p>\n<p>Our analysis of <a href=\"https:\/\/say-digital.io\/blog\/ai-agents-right-to-act-super-apps-hermes-agent\/?lang=en\">AI agents\u2019 right to act, including Hermes Agent<\/a> explains the next dependency: every connection remains subject to the service\u2019s permissions. A sensible first pilot is therefore not \u201cHermes with every client file\u201d. It is one bounded task, limited access and a prohibited transmission that the team can see being blocked.<\/p>\n<\/section>\n<p><!-- SAY-HERMES-CROSSVIEW-END --><\/p>\n<h2>Ask to see a blocked action, not just a successful summary<\/h2>\n<p>Before connecting real files, test the workflow with fictional data. The team should be able to verify that an out-of-scope document remains inaccessible, unauthorised information cannot leave in a query and a sensitive transmission waits for the right approval. Ask what happens when a control cannot reach a decision: uncertainty must not silently become permission.<\/p>\n<p>A successful test is not a permanent certification. Adding a tool, changing a provider or expanding permissions can reopen a route out. Claude Code\u2019s security documentation distinguishes permissions from network isolation. OpenAI likewise warns that safeguards reduce risk without eliminating it.<\/p>\n<p>For this task, the Say Digital Framework requires the prototype to demonstrate the expected refusals before a controlled rollout. Rules and tests then follow changes to the system, while the team measures time saved and approvals required. A demonstration that produces an impressive summary but never shows what it blocks is not enough to justify access to client records.<\/p>\n<p><strong>Want an agent to use your data without giving it unrestricted ways to send it out?<\/strong> Start with one task and the information it actually needs. <a href=\"https:\/\/say-digital.io\/\">Talk to Say Digital<\/a> about defining access, transmissions and the evidence to require before deployment.<\/p>\n<h2>Sources and resources<\/h2>\n<p>Documentation checked on 24 October 2026. These recommendations provide a decision framework, not a security certification.<\/p>\n<ul>\n<li><a href=\"https:\/\/code.claude.com\/docs\/en\/security\">Anthropic \u2014 Claude Code security: permissions, prompt injection and isolation.<\/a><\/li>\n<li><a href=\"https:\/\/code.claude.com\/docs\/en\/memory\">Anthropic \u2014 Claude Code memory: context and instructions versus enforced configuration.<\/a><\/li>\n<li><a href=\"https:\/\/developers.openai.com\/api\/docs\/guides\/agent-builder-safety\">OpenAI \u2014 agent safety: prompt injection, accidental disclosure and tool approvals.<\/a><\/li>\n<\/ul>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>A web search can disclose client information. Learn which access, outbound data and approval controls to require before connecting AI agents to confidential files.<\/p>\n","protected":false},"author":2,"featured_media":14730,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[164,172],"tags":[],"class_list":["post-14732","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ia","category-ia-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI agents and confidential data: beyond instructions<\/title>\n<meta name=\"description\" content=\"A web search can disclose client information. Learn which access, outbound data and approval controls to require before connecting AI agents to confidential files.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI agents and confidential data: beyond instructions\" \/>\n<meta property=\"og:description\" content=\"A web search can disclose client information. Learn which access, outbound data and approval controls to require before connecting AI agents to confidential files.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en\" \/>\n<meta property=\"og:site_name\" content=\"Say Digital I\/O\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-24T16:02:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-24T16:18:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/say-digital.io\/blog\/wp-content\/uploads\/2026\/10\/agents-ia-donnees-confidentielles-cover.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"842\" \/>\n\t<meta property=\"og:image:height\" content=\"595\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Lia Amplify\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Lia Amplify\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture est.\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en\"},\"author\":{\"name\":\"Lia Amplify\",\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/#\\\/schema\\\/person\\\/8ee0600139c147afbd1fa3ced079c557\"},\"headline\":\"AI agents and confidential data: why instructions are not enough\",\"datePublished\":\"2026-10-24T16:02:43+00:00\",\"dateModified\":\"2026-10-24T16:18:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en\"},\"wordCount\":1411,\"image\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/agents-ia-donnees-confidentielles-cover.jpg\",\"articleSection\":[\"IA\",\"IA\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en\",\"url\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en\",\"name\":\"AI agents and confidential data: beyond instructions\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/agents-ia-donnees-confidentielles-cover.jpg\",\"datePublished\":\"2026-10-24T16:02:43+00:00\",\"dateModified\":\"2026-10-24T16:18:09+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/#\\\/schema\\\/person\\\/8ee0600139c147afbd1fa3ced079c557\"},\"description\":\"A web search can disclose client information. Learn which access, outbound data and approval controls to require before connecting AI agents to confidential files.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en#primaryimage\",\"url\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/agents-ia-donnees-confidentielles-cover.jpg\",\"contentUrl\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/agents-ia-donnees-confidentielles-cover.jpg\",\"width\":842,\"height\":595,\"caption\":\"Illustration unDraw \u2014 protection des donn\u00e9es confidentielles.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/ai-agents-confidential-data-instructions-not-enough\\\/?lang=en#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI agents and confidential data: why instructions are not enough\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/\",\"name\":\"Say Digital I\\\/O\",\"description\":\"Un site utilisant WordPress\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/say-digital.io\\\/blog\\\/#\\\/schema\\\/person\\\/8ee0600139c147afbd1fa3ced079c557\",\"name\":\"Lia Amplify\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8817b2616d710fbc77dbbba6c455eebcdd7c8e299ff0dc15b9164e00ab16be69?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8817b2616d710fbc77dbbba6c455eebcdd7c8e299ff0dc15b9164e00ab16be69?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8817b2616d710fbc77dbbba6c455eebcdd7c8e299ff0dc15b9164e00ab16be69?s=96&d=mm&r=g\",\"caption\":\"Lia Amplify\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI agents and confidential data: beyond instructions","description":"A web search can disclose client information. Learn which access, outbound data and approval controls to require before connecting AI agents to confidential files.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/","og_locale":"fr_FR","og_type":"article","og_title":"AI agents and confidential data: beyond instructions","og_description":"A web search can disclose client information. Learn which access, outbound data and approval controls to require before connecting AI agents to confidential files.","og_url":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en","og_site_name":"Say Digital I\/O","article_published_time":"2026-10-24T16:02:43+00:00","article_modified_time":"2026-10-24T16:18:09+00:00","og_image":[{"width":842,"height":595,"url":"https:\/\/say-digital.io\/blog\/wp-content\/uploads\/2026\/10\/agents-ia-donnees-confidentielles-cover.jpg","type":"image\/jpeg"}],"author":"Lia Amplify","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Lia Amplify","Dur\u00e9e de lecture est.":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en#article","isPartOf":{"@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en"},"author":{"name":"Lia Amplify","@id":"https:\/\/say-digital.io\/blog\/#\/schema\/person\/8ee0600139c147afbd1fa3ced079c557"},"headline":"AI agents and confidential data: why instructions are not enough","datePublished":"2026-10-24T16:02:43+00:00","dateModified":"2026-10-24T16:18:09+00:00","mainEntityOfPage":{"@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en"},"wordCount":1411,"image":{"@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en#primaryimage"},"thumbnailUrl":"https:\/\/say-digital.io\/blog\/wp-content\/uploads\/2026\/10\/agents-ia-donnees-confidentielles-cover.jpg","articleSection":["IA","IA"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en","url":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en","name":"AI agents and confidential data: beyond instructions","isPartOf":{"@id":"https:\/\/say-digital.io\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en#primaryimage"},"image":{"@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en#primaryimage"},"thumbnailUrl":"https:\/\/say-digital.io\/blog\/wp-content\/uploads\/2026\/10\/agents-ia-donnees-confidentielles-cover.jpg","datePublished":"2026-10-24T16:02:43+00:00","dateModified":"2026-10-24T16:18:09+00:00","author":{"@id":"https:\/\/say-digital.io\/blog\/#\/schema\/person\/8ee0600139c147afbd1fa3ced079c557"},"description":"A web search can disclose client information. Learn which access, outbound data and approval controls to require before connecting AI agents to confidential files.","breadcrumb":{"@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en#primaryimage","url":"https:\/\/say-digital.io\/blog\/wp-content\/uploads\/2026\/10\/agents-ia-donnees-confidentielles-cover.jpg","contentUrl":"https:\/\/say-digital.io\/blog\/wp-content\/uploads\/2026\/10\/agents-ia-donnees-confidentielles-cover.jpg","width":842,"height":595,"caption":"Illustration unDraw \u2014 protection des donn\u00e9es confidentielles."},{"@type":"BreadcrumbList","@id":"https:\/\/say-digital.io\/blog\/ai-agents-confidential-data-instructions-not-enough\/?lang=en#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/say-digital.io\/blog\/"},{"@type":"ListItem","position":2,"name":"AI agents and confidential data: why instructions are not enough"}]},{"@type":"WebSite","@id":"https:\/\/say-digital.io\/blog\/#website","url":"https:\/\/say-digital.io\/blog\/","name":"Say Digital I\/O","description":"Un site utilisant WordPress","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/say-digital.io\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/say-digital.io\/blog\/#\/schema\/person\/8ee0600139c147afbd1fa3ced079c557","name":"Lia Amplify","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/8817b2616d710fbc77dbbba6c455eebcdd7c8e299ff0dc15b9164e00ab16be69?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8817b2616d710fbc77dbbba6c455eebcdd7c8e299ff0dc15b9164e00ab16be69?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8817b2616d710fbc77dbbba6c455eebcdd7c8e299ff0dc15b9164e00ab16be69?s=96&d=mm&r=g","caption":"Lia Amplify"}}]}},"_links":{"self":[{"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=\/wp\/v2\/posts\/14732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14732"}],"version-history":[{"count":2,"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=\/wp\/v2\/posts\/14732\/revisions"}],"predecessor-version":[{"id":14744,"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=\/wp\/v2\/posts\/14732\/revisions\/14744"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=\/wp\/v2\/media\/14730"}],"wp:attachment":[{"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14732"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/say-digital.io\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}