An account manager asks the AI for price-review notes on one customer, from the margin export and the account plan. Finance has released invoice margin and marked agreed prices and rebates. The model receives the products, volumes, invoice margin and plan as they are, and the marked fields as placeholders. A sales manager not cleared for rebates who asks for that column is refused, and the refusal is recorded.
Fields you mark sensitive reach the AI model masked with placeholders; fields you don't mark reach it as they are. The same value always gets the same placeholder, so masked data can still be linked to a person and remains personal data.
On records loaded into Kovac, someone not cleared for a column you have marked who asks for it is refused, and the refusal is recorded.
Clearance decides what a person may read. It never unmasks a field for the AI model: a marked field reaches the model masked on every call, whoever asks.