Security & data

Minimize personal data. Keep PII out of prompts when possible, or hash/anonymize.
Access controls. Restrict who can run which GPT flows.
Logs with care. Store only what you need; avoid raw payloads.