Encryption safeguards customer data used by AI systems. When sending data to a third-party LLM, encrypt it both in transit and at rest. section 11.2.1
Treat encryption as part of a broader privacy and security approach:
- Limit what data is sent with access controls, and audit LLM providers’ privacy commitments. section 11.2.1
- For healthcare AI, HIPAA includes encryption among its security and privacy controls. section 11.2.3
- Pair encryption with data isolation and access controls; encryption alone is not the only safeguard against exposure. section 11.2.3















