Protecting a Customer-Support LLM Agent from PII Leaks With Logging and Masking

A tutorial describes how to secure an LLM-based customer-support assistant for an e-commerce service like Cdiscount, which can look up orders, issue refunds, and send emails. It warns that attackers could use prompt injection or tool abuse to make the agent exfiltrate customer personal data. The proposed defense is ReskPoints, an AI agent logger that records each action with its confidence, parameters, and results. The tool automatically masks sensitive fields such as tokens, passwords, and contact details before logs leave the application. It also supports sampling rules to limit log volume while keeping full visibility into tool calls, and can export traces to platforms like Datadog, Prometheus, or OpenTelemetry.