Labelling data by sensitivity (public, internal, confidential, restricted) so controls can follow the label.
You have done this if
Documents marked confidential were excluded from the general assistant's index.
Say it in a review
Retrieval respects sensitivity labels; restricted content is never indexed for the broad assistant.