AI Agent Security for the Public Sector

A casework assistant retrieves personal records. Enforce source permissions, minimise retained data and prevent one user session from accessing another person’s case. Keep sensitive details out of routine decision logs.

Procurement, accessibility, privacy, records retention and jurisdiction are separate scope requirements. This site does not promise sovereign hosting, security clearance or a government framework appointment.

Assessment → Access engineering → Control implementation →

• Case access: Bind retrieval to the authorised case and role. Test that an instruction inside an uploaded document cannot broaden access to unrelated records.
• Consequential decisions: Separate an agent's recommendation from the official decision. Record who reviews the proposed action and the information available to them.
• Supplier and service boundaries: Identify the agent operator, tool provider and data destinations. Document how a service owner can suspend access and retain an appropriate decision record.

Include accessibility and service continuity requirements in the engagement scope. Technical testing does not establish the legal basis for using an automated decision process.