Customer Case Study: Preserving Privacy in a Generative AI Application (RAG) for Contract Review

A large telco sought to revolutionize its contract review process using Gen AI. Protecto helped the company maintain its commitment to data privacy and security, building trust with clients and
Written by
Amar Kanagaraj
Founder and CEO of Protecto

Table of Contents

Share Article

Customer Need

A large telco sought to revolutionize its contract review process using Gen AI. They aimed to build a generative AI application based on the Retrieval-Augmented Generation (RAG) architecture. The RAG-based application uses historical contracts as context to create a sophisticated AI agent. The primary objectives were to:

  • Reduce Time and Cost: Streamlining contract reviews and approvals. Reduce para-legal costs and time spent waiting for legal reviews.
  • Empower Employees: Enabling staff to review terms and contracts independently using the AI agent for faster decisions and fewer processes.

Challenge – Data Protection

The project faced a significant hurdle. The historical contracts, crucial for context tuning the AI model, contained Personally Identifiable Information (PII). There was a risk that the AI agent might inadvertently expose this sensitive data, such as who wrote the contract, during interactions with users. Protecting PII was paramount to complying with privacy laws and maintaining client trust.

Solution

The solution involved incorporating Protecto APIs. These APIs are designed to:

  • Identify PII: Detect personal data within the historic contracts.
  • Intelligent Tokenization: Employ a unique technique to obscure the identified PII while preserving the overall context and usability of the documents.
  • Data Protection: By masking sensitive PII data, the company eliminated data leaks and insider risks, ensuring no sensitive data was exposed during the AI agent’s contract reviews.
  • Functional AI agent: The model, using sanitized data, was capable of delivering accurate recommendations and analyses of contract terms without compromising privacy.

Outcome

  • Efficient Contract Review: The AI agent enabled faster and more cost-effective contract reviews. Staff could use the AI agent to review and understand contract terms, reducing dependency on legal teams.
  • Data Protection: The company maintained its commitment to data privacy and security, building trust with clients and stakeholders.
Amar Kanagaraj
Founder and CEO of Protecto
Amar Kanagaraj is the Founder and CEO of Protecto, a company focused on securing enterprise data for LLMs, AI agents, and agentic workflows. He is a second-time entrepreneur with 20+ years of experience across engineering, product, AI, go-to-market, and business leadership. Before Protecto, Amar co-founded FileCloud and helped scale it to over $10M ARR as CMO. Earlier in his career, he worked at Sun Microsystems, Booz & Company, and Microsoft Search & AI. He holds an MBA from Carnegie Mellon University and an MS in Computer Science from Louisiana State University.

Related Articles

Why “Block All PII” Is the Wrong Answer: Handling Sensitive Data in MCP Systems

Learn why blocking all PII in MCP systems reduces functionality and how context-aware data handling ensures security without sacrificing utility....

What Is Zero Trust AI Access (ZTAI)?

What is Zero Trust AI Access (ZTAI)? Learn how it secures AI agents, prevents data leaks, and protects sensitive data in modern AI systems....

Security in Multi-AI Agent Systems: Why It Matters for Modern Enterprises

Learn why security in multi-AI agent systems is critical for enterprises. Discover risks, solutions, and best practices to protect data and AI workflows....
Protecto Vault is LIVE on Google Cloud Marketplace!
Learn More