Nothing leaves, nothing is lost
Customer names, identity numbers, contract amounts — whatever you set a rule for stays inside your perimeter, and only the placeholder version goes out. The real values are restored when the answer returns. Nothing is missing for your people, and nothing is visible to the provider.