Research demoby Mai Phan
Answer questions about personal data without showing it to the LLM
A bank assistant must answer “Is this customer eligible for loan X?” without the model ever seeing the salary or birth date. Three layers, each with its own job: keep PII out of the prompt, prove every answer, and limit what many answers reveal together.
How it works
Userasks “eligible for loan X?”
LLM assistantsees public docs + yes/no claims only
Verifierchecks the proof against the stored commitment
PII Vaultthe only place with raw PII; limits queries
The Issuer signed each salary/birth-date commitment once, at enrollment.
Issuersigns commitments
The tour · 4 steps