Anyone enforcing client-side PII redaction before using an AI tool?