0cross-customer disclosures in 40,000 adversarial queries
100%of retrievals authorised at document level
72 hoursbreach reporting playbook rehearsed against DPDP Rules
Home/Case Studies/Indian private bank fixes cross-tenant leakage in a retrieval-augmented assistant before launch
Indian private bank fixes cross-tenant leakage in a retrieval-augmented assistant before launch
Pre-launch red teaming found that a customer service assistant could be induced to surface other customers' documents through retrieval; the bank re-architected retrieval to enforce authorisation and rehearsed the DPDP breach process.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.