Private deployment, access control and redaction beat "paste it into a public chatbot". Security is part of the software design, not a slide after go-live.
Staff already paste contracts and customer lists into public tools because the internal search is worse. Blocking the website without giving them a controlled path just moves the paste to a phone.
Decide where prompts, logs and retrieved chunks live. Private or VPC deploy is one option. Tenant isolation, role filters on retrieval and retention on chat logs are the others. A model name does not replace those choices.
If a role cannot export a customer file in the admin, the model must not return it either. AI features inherit the permission matrix. They do not get a side door.
Data classes, deploy target, who may query, what is redacted, and how long logs stay. That is software work. It is not a GPU invoice.
Request a scope