Sensitive data in prompts and logs
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
keep secrets and personal data out of where they do not belong.
Planned topics
- Prompts leave your system for the model provider; send the minimum.
- Never put API keys, passwords, or other customers' data in a prompt.
- Prompts and responses are often logged; redact personal data in logs.
- Check the provider's data retention and training terms before sending real data.
- A system prompt is not a secret store; assume it can leak.
Draft outline details
Demonstration
before/after of a prompt: customer's full record versus only the needed fields.
Check your understanding
Where should an API key live, in the system prompt or in configuration?
Show answer
In configuration or a secret store.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.