# OUT-03 PII and secrets leakage prevention (Critical)

Domain: OUT Output Integrity & Supply Chain · HI-AAF v1.3 · Public review · https://humanintel.net/standard/out/out-03

PII and secrets leakage detection is applied to outputs. The agent does not disclose credentials, internal system information, other users' data, or other sensitive information.

Outputs are scanned for PII, credentials, internal system information, and other sensitive data that should not be disclosed. The agent does not leak secrets, other users' data, or internal implementation details in its outputs. This control is the output-side complement to DAT-03's input-side PII handling and is critical for preventing data breaches through agent outputs.

Critical control: a Critical failure precludes HI-AAF Certification regardless of the maturity level achieved on any other control.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for OUT-03: Leakage detection is active on all output paths; detection covers PII, credentials, and internal system information; no leakage incident has occurred in the review period or all incidents have been remediated.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Leakage detection is active on all output paths.
- Detection covers PII, credentials, and internal system information.
- No leakage incident has occurred in the review period or all incidents have been remediated.

## Framework mappings

- NIST AI RMF: MANAGE 2.3
- OWASP LLM Top 10: LLM02
- SOC 2 (TSC): P3.1, C1.1
- EU AI Act: Art. 15(3)
- Singapore: PDPA s.24, AI Verify Transparency

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites DAT-03 PII handling at runtime: https://humanintel.net/standard/dat/dat-03

## Cite this control

Human Intelligence. HI-AAF v1.3, OUT-03 PII and secrets leakage prevention. Public review edition, July 2026. https://humanintel.net/standard/out/out-03