PII handling
The way a deployment detects, protects, minimizes, logs, or avoids personally identifiable information — must be approved before real customer data enters any eval set.
PII handling had to be approved before real customer tickets entered the eval set.