/ HR & People Ops

Headcount, attrition, hiring funnel — with PII off-limits.

Mark salary, SSN, DOB, and address columns as never-leave-the-database. The LLM sees aggregates only. Payroll data stays locked.