{"id":"GRD-004","section":"Runtime Guardrails","requirement":"Detect and coach in the languages your workforce uses","acceptance":"Detect sensitive content in every language the workforce uses, including mixed-language prompts and translated text, and show coaching messages in the employee's language.","tier":"AT1–AT4","whyItMatters":"A control that only reads English leaves much of the workforce unprotected.","verificationMethod":"LT","verificationTest":"Sensitive information is detected in all the languages required for your workforce.","formerly":"DAT-019","alsoIn":[],"sort":14,"adoptionContext":"Employees write prompts in their working language across every listed context, so detection quality should be measured for each language in use.","mappings":[{"frameworks":["csf","iso27001"],"explanation":"Detection that works in each working language extends data-in-use protection and leakage prevention to employees who do not prompt in English. Coverage must be demonstrated per language; a result for one language does not carry over to another.","kind":"framework","references":{"csf":["PR.DS-10"],"iso27001":["A.8.12"]},"relation":null,"conditions":[]},{"frameworks":["rmf","iso","soc2"],"explanation":"Per-language detection and false-positive results, with the test-set size and composition, provide performance and validation evidence. The buyer chooses the languages and thresholds; results from a vendor corpus still need testing on the buyer's own content.","kind":"framework","references":{"rmf":["MEASURE 2.3","MEASURE 2.5"],"iso":["A.6.2.4"],"soc2":["CC4.1"]},"relation":null,"conditions":[]}],"area":"Runtime Guardrails","areaSlug":"GRD","url":"/r/GRD-004","frameworkRefs":{"ISO27001":["A.8.12"],"ISO42001":["A.6.2.4"],"NIST-CSF":["PR.DS-10"],"NIST-AI-RMF":["MEASURE 2.3","MEASURE 2.5"],"SOC2":["CC4.1"]}}