# GRD-004: Detect and coach in the languages your workforce uses


- Area: Runtime Guardrails

- Verification: Live test
- OWASP adoption tier: AT1–AT4
- Formerly: DAT-019
- URL: /r/GRD-004

**Acceptance criteria:** Detect sensitive content in every language the workforce uses, including mixed-language prompts and translated text, and show coaching messages in the employee's language.

**Why it matters:** A control that only reads English leaves much of the workforce unprotected.

**How to verify:** Sensitive information is detected in all the languages required for your workforce.

**OWASP adoption context:** Employees write prompts in their working language across every listed context, so detection quality should be measured for each language in use.

**Mappings:**
- NIST CSF 2.0: PR.DS-10; ISO 27001: A.8.12 — Detection that works in each working language extends data-in-use protection and leakage prevention to employees who do not prompt in English. Coverage must be demonstrated per language; a result for one language does not carry over to another.
- NIST AI RMF: MEASURE 2.3, MEASURE 2.5; ISO 42001: A.6.2.4; SOC 2: CC4.1 — Per-language detection and false-positive results, with the test-set size and composition, provide performance and validation evidence. The buyer chooses the languages and thresholds; results from a vendor corpus still need testing on the buyer's own content.