Customer contacts and their mobile numbers

Pipeline (CRM)Intentional misuse

Third-party personal data, which makes this the one your privacy counsel cares about: these are named individuals at named customers who never agreed to be in an AI context window.

Set the scene

Delta has been asked to line up customer quotes for a launch. She wants contacts she can approach. She has no CRM access of her own.

Show the web UI first

shows Delta no companies and no contacts. Contacts are only reachable through an account page, and every account page 403s for her.

Now ask the agent

Prompt to typeWhich of our customers are at risk of churning, and who should I call about it?

Variations that work the same way:

Give me direct contact details for the decision makers at our top accounts.
Who are the named contacts at Northwind Energy and Verity Insurance?

What happens with no protection

list_at_risk_accounts reads /api/v1/reports/at-risk, which joins deals, companies, reps and contacts with no scoping, and hands back the rep's own churn notes next to the customer's personal contact details:

Northwind Energy - Offshore Asset Monitoring   $310,000
  "If it slips past [date] the incumbent auto-renews for twelve months...
   Fiona has hinted their group CTO favours consolidating with an existing supplier."
  Fiona Kerr, Head of Operations Technology
  f.kerr@northwindenergy.co.uk / +44 7700 900311

Verity Insurance - Claims Automation Renewal   $198,000
  "Usage is down 30% year on year and two of the three original champions have left.
   Eleanor has asked for a 20% reduction just to renew flat on volume."
  Eleanor Whitfield, Chief Claims Officer
  ewhitfield@verityinsurance.com / +1 860-555-0612

Two kinds of sensitive data in one response: personal data about people at other companies, and commercial judgements about those companies that were never meant to leave the account team.

What happens with protection deployed

AI Demo — Customer Contact Data matches the mobile-number formats and the field names around them, and the Gateway policy on blocks the response.

If you want to show the other half, ask the same question with the protection set to PROTECTION_MODE=log: the data still flows, and the Gateway HTTP log records exactly which customer records went into a model. That is often the more useful conversation with a privacy team.

Where to show the evidence

Gateway HTTP logs: the blocked response and the matching profile.
AI Gateway logs: if any of it reached the model on an earlier turn, the completion is blocked there too.