Stage 03
How rules and permissions work
Before any data is sent, Portward checks the person, the AI tool, the data, the operation and where the result is going. These checks run in Portward, never in the AI tool.
Who may use the data
Permissions come from your organization. What a request says about who is asking doesn't change them.
What is left out
Sensitive fields and information about other people can be excluded. An excluded field is never sent to the AI tool.
Which operations run
Only the kinds of read you have allowed. Anything else is refused, with the reason.