Security & data
Minimize personal data.
Keep PII out of prompts when possible, or hash/anonymize.
Access controls.
Restrict who can run which GPT flows.
Logs with care.
Store only what you need; avoid raw payloads.