# LeadPilot — AI Data Privacy & Minimization

**Document Version:** 1.0.0 (Phase 8 AI Qualification Lock)  
**Status:** Implemented & Verified  

---

## 1. Data Minimization Invariant

Only the strictly required lead fields (`lead_name`, `company`, `inquiry_text`, `source`, `business_profile`) are transmitted to the external LLM provider.

**Fields Explicitly Excluded from AI Payloads:**
* Internal passwords / credentials
* User authentication tokens & session identifiers
* Private system prompts & server environment variables
* Unrelated tenant workspace records