Customer Case Study: Preserving Privacy in a Generative AI Application (RAG) for Contract Review

A large telco sought to revolutionize its contract review process using Gen AI. Protecto helped the company maintain its commitment to data privacy and security, building trust with clients and stakeholders.
Written by
Amar Kanagaraj
Founder and CEO of Protecto

Customer Need

A large telco sought to revolutionize its contract review process using Gen AI. They aimed to build a generative AI application based on the Retrieval-Augmented Generation (RAG) architecture. The RAG-based application uses historical contracts as context to create a sophisticated AI agent. The primary objectives were to:

  • Reduce Time and Cost: Streamlining contract reviews and approvals. Reduce para-legal costs and time spent waiting for legal reviews.
  • Empower Employees: Enabling staff to review terms and contracts independently using the AI agent for faster decisions and fewer processes.

Challenge – Data Protection

The project faced a significant hurdle. The historical contracts, crucial for context tuning the AI model, contained Personally Identifiable Information (PII). There was a risk that the AI agent might inadvertently expose this sensitive data, such as who wrote the contract, during interactions with users. Protecting PII was paramount to complying with privacy laws and maintaining client trust.

Solution

The solution involved incorporating Protecto APIs. These APIs are designed to:

  • Identify PII: Detect personal data within the historic contracts.
  • Intelligent Tokenization: Employ a unique technique to obscure the identified PII while preserving the overall context and usability of the documents.
  • Data Protection: By masking sensitive PII data, the company eliminated data leaks and insider risks, ensuring no sensitive data was exposed during the AI agent’s contract reviews.
  • Functional AI agent: The model, using sanitized data, was capable of delivering accurate recommendations and analyses of contract terms without compromising privacy.

Outcome

  • Efficient Contract Review: The AI agent enabled faster and more cost-effective contract reviews. Staff could use the AI agent to review and understand contract terms, reducing dependency on legal teams.
  • Data Protection: The company maintained its commitment to data privacy and security, building trust with clients and stakeholders.
Amar Kanagaraj
Founder and CEO of Protecto
Amar Kanagaraj is the Founder and CEO of Protecto, a company focused on securing enterprise data for LLMs, AI agents, and agentic workflows. He is a second-time entrepreneur with 20+ years of experience across engineering, product, AI, go-to-market, and business leadership. Before Protecto, Amar co-founded FileCloud and helped scale it to over $10M ARR as CMO. Earlier in his career, he worked at Sun Microsystems, Booz & Company, and Microsoft Search & AI. He holds an MBA from Carnegie Mellon University and an MS in Computer Science from Louisiana State University.

Table of Contents

Share Article

Related Articles

AI Acceptable Use Policy: Template, Examples and Implementation Guide

Learn how to create an AI acceptable use policy with practical templates, examples, and implementation steps. Discover how enterprises define AI usage rules, protect sensitive data, and enable secure generative AI adoption....

What Is Data Loss Prevention (DLP)? Types, Use Cases, and Best Practices

Understand data loss prevention (DLP), its meaning, types, use cases, and how modern DLP solutions help enterprises discover, monitor, and protect sensitive data across cloud, AI, and enterprise workflows....

Principle of Least Privilege: Meaning, Examples, and Implementation for AI Agents

Understand the principle of least privilege, its access control model, real-world examples, and how enterprises implement least privilege for securing AI agents, sensitive data, and modern applications....

Turn these challenges into your next AI advantage.

Talk to a solutions engineer about securing your data privacy, governance, and agent access — in one platform.