# Safety and Data Protection

> Evaluation scenarios for guardrails, PII redaction, prompt injection defense, and coding assistant protection.

# Safety and Data Protection

*Feeds categories A (data protection and DLP) and B (prompt injection, guardrails, tool safety).*

Starting state from the [fast track](/agent-router-enterprise/fully-managed/fast-track/): a working key and live agent traffic exist to put behind guardrails.

Grade each scenario Pass (2 points), Pass with gaps (1), or Fail (0) against the [grading rubric](/product-architecture/product-evaluation/evaluation-scenarios/#grading-rubric), and carry the subtotal into the [summary scorecard](/product-architecture/product-evaluation/evaluation-scenarios/#summary-scoring).

  Scoresheet document
  
    {props.body ?? 'For your convenience, this page can be downloaded as PDF or printed directly. Site navigation is omitted, the scoring table keeps its rows intact with the header repeated on every page, and the Grade and Notes columns leave room for handwriting.'}
  
  
    <button
      type="button"
      className="tare-print-button"
      onClick={() => window.print()}
    >
      <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
        <polyline points="6 9 6 2 18 2 18 9" />
        <path d="M6 18H4a2 2 0 0 1-2-2v-5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2v5a2 2 0 0 1-2 2h-2" />
        <rect x="6" y="14" width="12" height="8" />
      </svg>
      Export to PDF
    </button>
  

| ID | Scenario | Guide | Grade | Notes |
| :-- | :---- | :---- | :---- | :---- |
| 7.1 | Protect requests with guardrails from the developer side. Verify: a guarded request shows the applied policy in its log entry. | [Protect requests with guardrails](/agent-router-enterprise/guides/operate-and-govern/safety-and-data-protection/protect-requests-with-guardrails/) | | |
| 7.2 | Configure a guardrail provider and a rule that uses it (for example `regexp` with a Patterns entry, or `tetrate` with a toxicity check). Verify: a violating prompt is blocked or redacted as configured, or the would-be action is recorded in monitor mode. | [Configure guardrail providers](/agent-router-enterprise/guides/operate-and-govern/safety-and-data-protection/configure-vendor-guardrails/) | | |
| 7.3 | Configure a guardrail with a keyword or regex rule. Verify: a seeded pattern triggers the configured action. | [Configure guardrails](/agent-router-enterprise/guides/operate-and-govern/safety-and-data-protection/configure-custom-guardrails/) | | |
| 7.4 | Detect and redact sensitive data: send a prompt containing seeded personally identifiable information (PII) and a fake API key. Verify: the response and logs show redaction, not the raw values. | [Detect and redact sensitive data](/agent-router-enterprise/guides/operate-and-govern/safety-and-data-protection/detect-and-redact-sensitive-data/) | | |
| 7.5 | Detect and block prompt injection using a known jailbreak pattern. Verify: the request is blocked or sanitized and a decision event is recorded. | [Detect and block prompt injection](/agent-router-enterprise/guides/operate-and-govern/safety-and-data-protection/detect-and-block-prompt-injection/) | | |
| 7.6 | Protect coding assistant traffic with a stricter policy bundle. Verify: a seeded secret in a coding-agent request is blocked or redacted while normal traffic is unaffected. | [Protect coding assistant traffic](/agent-router-enterprise/guides/operate-and-govern/safety-and-data-protection/protect-coding-assistant-traffic/) | | |
| | **Subtotal** | | **/12** | |