Data Sovereignty
-
The Prompt Is Now a Data Channel: Keeping CUI Out of the Model
CUI protection was built for data at rest and data in transit. A prompt to a frontier model is neither, and each hop it takes, from prompt to cache to training, carries a different DFARS obligation. GSA's first AI-specific safeguarding clause takes effect October 19, 2026.