Acceptance criteria
Detect sensitive content in every language the workforce uses, including mixed-language prompts and translated text, and show coaching messages in the employee's language.
Why it matters
A control that only reads English leaves much of the workforce unprotected.
How to verify
Sensitive information is detected in all the languages required for your workforce.
OWASP adoption context
Employees write prompts in their working language across every listed context, so detection quality should be measured for each language in use.
Framework mappings
Detection that works in each working language extends data-in-use protection and leakage prevention to employees who do not prompt in English. Coverage must be demonstrated per language; a result for one language does not carry over to another.
Per-language detection and false-positive results, with the test-set size and composition, provide performance and validation evidence. The buyer chooses the languages and thresholds; results from a vendor corpus still need testing on the buyer's own content.