{"id":"https://openalex.org/W7225005646","doi":"https://doi.org/10.5281/zenodo.23825860","title":"Before the Prompt: A Fail-Closed Architecture for PII Protection and Business Privacy Policy Enforcement in Enterprise AI","display_name":"Before the Prompt: A Fail-Closed Architecture for PII Protection and Business Privacy Policy Enforcement in Enterprise AI","publication_year":2026,"publication_date":"2026-10-31","ids":{"openalex":"https://openalex.org/W7225005646","doi":"https://doi.org/10.5281/zenodo.23825860"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23825860","doi":"https://doi.org/10.5281/zenodo.23825860","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23825860","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"volume":null,"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23825860","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160280470","display_name":"Weerasooriya Mudiyanselage Pushpitha Sandaruwan Weerasooriya","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Weerasooriya, Weerasooriya Mudiyanselage Pushpitha Sandaruwan","raw_affiliation_strings":["Post AI Care"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Post AI Care","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5160280470"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82725732,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.00559999980032444,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0010000000474974513,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"personally identifiable information","score":0.9120000004768372},{"id":"https://openalex.org/keywords/synthetic-data-generation","display_name":"synthetic data generation","score":0.6019999980926514},{"id":"https://openalex.org/keywords/enterprise-ai","display_name":"enterprise AI","score":0.7210000157356262},{"id":"https://openalex.org/keywords/privacy-policy-enforcement","display_name":"privacy policy enforcement","score":0.7059999704360962},{"id":"https://openalex.org/keywords/ollama","display_name":"Ollama","score":0.8180000185966492},{"id":"https://openalex.org/keywords/privacy-engineering","display_name":"privacy engineering","score":0.6610000133514404},{"id":"https://openalex.org/keywords/sensitive-information-detection","display_name":"sensitive information detection","score":0.6119999885559082},{"id":"https://openalex.org/keywords/human-review","display_name":"human review","score":0.39500001072883606}],"concepts":[{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5891000032424927},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.5740000009536743},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.5550000071525574},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5519000291824341},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.536899983882904},{"id":"https://openalex.org/C2780876879","wikidata":"https://www.wikidata.org/wiki/Q3054749","display_name":"Meaning (existential)","level":2,"score":0.5175999999046326},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.48730000853538513},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4708000123500824},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.4521999955177307},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.43220001459121704},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.4171000123023987},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.413100004196167},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.38089999556541443},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3772999942302704},{"id":"https://openalex.org/C10590034","wikidata":"https://www.wikidata.org/wiki/Q1048431","display_name":"Enterprise architecture","level":3,"score":0.36340001225471497},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.35690000653266907},{"id":"https://openalex.org/C34974158","wikidata":"https://www.wikidata.org/wiki/Q131257","display_name":"Intellectual property","level":2,"score":0.34790000319480896},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3447999954223633},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.3440999984741211},{"id":"https://openalex.org/C46681722","wikidata":"https://www.wikidata.org/wiki/Q4725589","display_name":"Alias","level":2,"score":0.3368000090122223},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.32899999618530273},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.3172999918460846},{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.30320000648498535},{"id":"https://openalex.org/C78524284","wikidata":"https://www.wikidata.org/wiki/Q6031155","display_name":"Information privacy law","level":4,"score":0.29750001430511475},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.28119999170303345},{"id":"https://openalex.org/C2777351106","wikidata":"https://www.wikidata.org/wiki/Q49371","display_name":"Legislation","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C2777152325","wikidata":"https://www.wikidata.org/wiki/Q108163","display_name":"Proposition","level":2,"score":0.2605000138282776},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C109986646","wikidata":"https://www.wikidata.org/wiki/Q546113","display_name":"Public policy","level":2,"score":0.25619998574256897},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2522999942302704},{"id":"https://openalex.org/C4216890","wikidata":"https://www.wikidata.org/wiki/Q815823","display_name":"Business model","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23825860","doi":"https://doi.org/10.5281/zenodo.23825860","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23825860","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.5281/zenodo.23825861","doi":"https://doi.org/10.5281/zenodo.23825861","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23825861","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23825860","doi":"https://doi.org/10.5281/zenodo.23825860","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23825860","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7115886023","https://openalex.org/W6911966682","https://openalex.org/W4416243544","https://openalex.org/W7125824093","https://openalex.org/W7167842477","https://openalex.org/W7141575106","https://openalex.org/W7221915544","https://openalex.org/W7213157710","https://openalex.org/W4413754605","https://openalex.org/W7164013247"],"abstract_inverted_index":{"This":[0],"technical":[1,71],"white":[2],"paper":[3,30,93],"introduces":[4],"Pleco,":[5],"a":[6],"locally":[7],"deployable":[8],"privacy":[9,34,122],"protection":[10],"solution":[11],"designed":[12],"to":[13,45,117,119],"help":[14],"organisations":[15],"reduce":[16],"the":[17,32,62,96],"exposure":[18],"of":[19],"personally":[20],"identifiable":[21],"information":[22,131],"(PII)":[23],"when":[24],"using":[25],"external":[26],"AI":[27,39,126,135],"assistants.":[28],"The":[29,92,114],"explores":[31],"growing":[33],"challenges":[35],"associated":[36],"with":[37,56],"enterprise":[38,125],"adoption":[40],"and":[41,53,66,87,110,128],"presents":[42],"Pleco's":[43,70],"approach":[44],"identifying":[46],"sensitive":[47],"information,":[48],"validating":[49],"detected":[50],"text":[51],"spans,":[52],"replacing":[54],"PII":[55],"realistic":[57],"synthetic":[58,84],"data":[59],"while":[60],"preserving":[61],"original":[63],"message's":[64],"meaning":[65],"context.":[67],"It":[68],"explains":[69],"architecture,":[72],"including":[73],"its":[74],"fine-tuned":[75],"language":[76],"model,":[77],"Ollama-based":[78],"local":[79],"inference,":[80],"deterministic":[81],"sanitisation":[82],"process,":[83],"alias":[85],"management,":[86],"policy":[88],"knowledge":[89],"ingestion":[90],"approach.":[91],"also":[94],"discusses":[95],"fail-closed":[97],"design":[98],"philosophy,":[99],"human":[100],"review,":[101],"model":[102],"evaluation,":[103],"deployment":[104],"considerations,":[105],"security":[106],"boundaries,":[107],"current":[108],"limitations,":[109],"potential":[111],"future":[112],"enhancements.":[113],"publication":[115],"aims":[116],"contribute":[118],"discussions":[120],"around":[121],"engineering,":[123],"responsible":[124],"adoption,":[127],"protecting":[129],"personal":[130],"before":[132],"it":[133],"enters":[134],"systems.":[136]},"counts_by_year":[],"updated_date":"2026-11-02T09:45:03.842371","created_date":"2026-11-01T00:00:00"}