Three steps
- 01 · Isolated executionObfuscated queries are composed and approved by the analyst before submission, in an unclassified VDI or confidential VM.
- 02 · Local controlDLP scanning, save and print restrictions, and audit logging. The original specific query is reapplied to the broad result set.
- 03 · Guarded transferSanitized excerpts cross manually, one way only, via ISAFE, DOTS, or a high-assurance CDS guard.
Privacy-enhancing techniques
- Broadened queries. A 1 km² site widened to a 50–100 km² region over a year.
- Subquery decomposition. 2–5 innocuous partial queries, intersected locally.
- Key query generation. Alternative phrasings with no sensitive terms.
- Noise injection. Plausible dummy traffic with rotated timing.
The same pattern applies to GenAI: prompts are reviewed before submission, responses are filtered in-session, and only sanitized excerpts move across, never raw prompts or full model outputs.