RAG over-retrieval / entitlement-failure register
Public register of incidents in which an AI assistant, agent, or RAG system surfaced content a principal was not entitled to see, or amplified access.
October 1, 2026·10 min read
industry
8 posts
Ethical Walls for Legal AI: Matter-Based RAG Access
Law firms are putting AI over matter documents. Here is how to enforce ethical walls, privilege, and conflicts screening at the retrieval layer with Gateco.
July 3, 2026·7 min read
EU AI Act: 67 Days to Enforcement: The RAG Pipeline Checklist
August 2, 2026 is the EU AI Act deadline. If your RAG pipeline touches Annex III high-risk use cases, here is the practical seven-item checklist.
May 27, 2026·7 min read
93 Days to EU AI Act: Annex III Mapping for RAG Pipelines
August 2, 2026 is the EU AI Act deadline for high-risk AI. If your RAG pipeline touches employment, credit, or healthcare decisions, you are in scope.
May 1, 2026·8 min read
The RAG Authorization Gap for Security Leaders
Every RAG pipeline your team ships creates an access surface that bypasses application-layer authorization. Here is how to close the gap, in security terms.
April 22, 2026·7 min read
RAG Security for Financial Services: SOX and Data Walls
Financial services face unique RAG challenges: information barriers, SOX compliance, and classification-based access to market-sensitive data. How Gateco helps.
February 28, 2025·7 min read
HIPAA-Compliant AI Retrieval: Protecting PHI in RAG Pipelines
Healthcare RAG must protect PHI at every retrieval. Gateco's ABAC policies, classification-based access, and audit trails support HIPAA minimum necessary.
February 21, 2025·7 min read
Multi-Tenant LLM Authorization for SaaS
SaaS platforms with LLM features must prevent cross-tenant leakage in shared RAG infrastructure. How to enforce tenant isolation at the retrieval layer.
February 14, 2025·7 min read