The marketing director asks which segments carried margin last year, to plan the next campaign. Finance has released revenue and margin by segment as a spreadsheet, with client names and staff cost rates marked sensitive. The model receives the segment figures as they are, and client names and cost rates as placeholders. A campaign executive not cleared for client names who asks for that column is refused, and the refusal is recorded.
Fields you mark sensitive reach the AI model masked with placeholders; fields you don't mark reach it as they are. The same value always gets the same placeholder, so masked data can still be linked to a person and remains personal data.
On records loaded into Kovac, someone not cleared for a column you have marked who asks for it is refused, and the refusal is recorded.
Clearance decides what a person may read. It never unmasks a field for the AI model: a marked field reaches the model masked on every call, whoever asks.