{"page":"/blog/ai-agents-data-leakage","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Route","How it happens","Evidence","First control"],"rows":[["1. Prompts and context","The agent sends records to a hosted model to reason about them","AdCP tells operators to settle prompt retention and training use in each provider's DPA (AdCP privacy considerations)","Send aggregates, not rows; contract terms on retention and training"],["2. Tool calls","The agent passes data to a third-party MCP server or API","MCP calls tools \"arbitrary code execution\" and says hosts must obtain consent before exposing user data (MCP specification)","Allowlisted servers; per-tool data scopes"],["3. Logs and traces","Prompts, tool inputs and outputs land in logs kept by several vendors","AdCP leaves retention of \"LLM prompts, conversation logs\" to the operator (AdCP)","Redaction at write time; short retention"],["4. Model training","Prompts or outputs are used to train or fine-tune a model","OWASP lists sensitive information disclosure as LLM02:2025 (OWASP GenAI)","No-training terms; self-hosted models for the most sensitive data"],["5. Delegation","One agent hands a task, with data, to another agent","A2A agents run as \"opaque\" systems that do not share internal plans or tools (A2A specification)","Pass references, not data; check the receiving agent"],["6. Injection and exfiltration","Untrusted text instructs the agent to send data out","CVE-2025-32711 in Microsoft 365 Copilot (NIST NVD)","Separate data-reading tools from outbound tools"]],"sourceUrls":[["https://docs.adcontextprotocol.org/dist/docs/3.2.8/reference/privacy-considerations.md"],["https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/docs/specification/2026-07-28/index.mdx"],["https://docs.adcontextprotocol.org/dist/docs/3.2.8/reference/privacy-considerations.md"],["https://genai.owasp.org/llm-top-10/"],["https://github.com/a2aproject/A2A/blob/main/docs/specification.md"],["https://nvd.nist.gov/vuln/detail/CVE-2025-32711"]]}