What Is AI Response Filtering for PII Leakage?

Most conversations about protecting sensitive data in AI systems start with the prompt: what a user typed, what got pasted in, what a retrieval step pulled into context. That's the front door, and it matters. But a completely clean prompt doesn't guarantee a clean response.