Security in RAG: Access Control, Tenant Isolation, and Redaction
Security in RAG: Access Control, Tenant Isolation, and Redaction
Tenant isolation
Never rely on similarity alone. Always filter by tenant_id/user_id/access_level.
Redaction
Redact sensitive fields before storage or at retrieval. Don’t send PII into the prompt unless necessary and permitted.
Audit logs
Log which documents were retrieved and why.
