Agent workflows can make it easy to assemble broad context. Data minimization asks a harder question: what is actually necessary for this decision or action, and how long does that information need to remain available?

Map data to a specific process purpose

For each field, document, and retrieved source, name the step that requires it and the purpose it serves. Avoid collecting broad categories “for future AI use” without a defined operating need.

Minimize prompt context and operational logs

Use the smallest context that supports the task. Redact or tokenize sensitive fields where practical, and avoid copying full documents into logs when a reference and structured outcome are sufficient.

Set retention by record type

Diagnostic inquiries, workflow evidence, business records, security logs, and support communications may require different retention. Define deletion, legal hold, and access procedures rather than applying one indefinite period.

Create a step-level data inventory

For each workflow step, list the fields, documents, retrieved sources, and derived values used. Record purpose, source, sensitivity, access, transfer, storage, and retention. Challenge broad context requests by testing whether the step can operate with a smaller field set, a reference, a redacted value, or a purpose-built summary.

Distinguish data required to perform the business process from data retained to troubleshoot or improve it. These purposes may justify different access and retention. Do not make future experimentation the default reason to preserve complete operational inputs.

Verify minimization after the workflow runs

Trace where data appears after execution: application records, prompts, caches, logs, exports, support tickets, analytics, and backups. Confirm that retention and deletion mechanisms reach each relevant copy. If a vendor or model provider processes data, document the approved arrangement and the settings that apply to the deployed workflow.

Review the inventory when a new source, model, tool, or troubleshooting practice is introduced. A design can become less minimal through small operational changes even when the primary process remains the same. Record approvals for any expansion in purpose or retained data.

Further reading

These primary references informed the operating principles in this guide.

Continue the evaluation

Read the Privacy NoticeBook a process diagnostic →