Full prompt and response logs are the most useful debugging tool and the most sensitive data store in the system. Treat them accordingly.
Practices
- Decide what to log: metadata always; content only where needed and permitted.
- Redact personal and secret values before storage.
- Restrict access by role and record who views logs.
- Set retention limits and delete on schedule.
- Keep logs in approved regions and systems.
The log store inherits the most sensitive data that flows through the system. Classify and protect it as such.