Customer Case Study: Preserving Privacy in a Generative AI Application (RAG) for Contract Review

A large telco sought to revolutionize its contract review process using Gen AI. Protecto helped the company maintain its commitment to data privacy and security, building trust with clients and
Written by
Amar Kanagaraj
Founder and CEO of Protecto

Table of Contents

Share Article

Customer Need

A large telco sought to revolutionize its contract review process using Gen AI. They aimed to build a generative AI application based on the Retrieval-Augmented Generation (RAG) architecture. The RAG-based application uses historical contracts as context to create a sophisticated AI agent. The primary objectives were to:

  • Reduce Time and Cost: Streamlining contract reviews and approvals. Reduce para-legal costs and time spent waiting for legal reviews.
  • Empower Employees: Enabling staff to review terms and contracts independently using the AI agent for faster decisions and fewer processes.

Challenge – Data Protection

The project faced a significant hurdle. The historical contracts, crucial for context tuning the AI model, contained Personally Identifiable Information (PII). There was a risk that the AI agent might inadvertently expose this sensitive data, such as who wrote the contract, during interactions with users. Protecting PII was paramount to complying with privacy laws and maintaining client trust.

Solution

The solution involved incorporating Protecto APIs. These APIs are designed to:

  • Identify PII: Detect personal data within the historic contracts.
  • Intelligent Tokenization: Employ a unique technique to obscure the identified PII while preserving the overall context and usability of the documents.
  • Data Protection: By masking sensitive PII data, the company eliminated data leaks and insider risks, ensuring no sensitive data was exposed during the AI agent’s contract reviews.
  • Functional AI agent: The model, using sanitized data, was capable of delivering accurate recommendations and analyses of contract terms without compromising privacy.

Outcome

  • Efficient Contract Review: The AI agent enabled faster and more cost-effective contract reviews. Staff could use the AI agent to review and understand contract terms, reducing dependency on legal teams.
  • Data Protection: The company maintained its commitment to data privacy and security, building trust with clients and stakeholders.
Amar Kanagaraj
Founder and CEO of Protecto
Amar Kanagaraj is the Founder and CEO of Protecto, a company focused on securing enterprise data for LLMs, AI agents, and agentic workflows. He is a second-time entrepreneur with 20+ years of experience across engineering, product, AI, go-to-market, and business leadership. Before Protecto, Amar co-founded FileCloud and helped scale it to over $10M ARR as CMO. Earlier in his career, he worked at Sun Microsystems, Booz & Company, and Microsoft Search & AI. He holds an MBA from Carnegie Mellon University and an MS in Computer Science from Louisiana State University.

Related Articles

HIPAA vs. GDPR Compliance: What Is the Difference and Why Does It Matter?

Learn the real difference between HIPAA vs. GDPR Compliance and why AI-driven businesses must rethink data privacy today....

OpenAI HIPAA BAA: What It Actually Covers (And What Leaves PHI Exposed) 

AI Security Architecture: Zero Trust Patterns for GenAI and ML

Discover how AI Security Architecture protects GenAI, ML models, APIs, and sensitive data using Zero Trust security strategies....