1 essay on this topic.
A PII scrubber in front of an LLM API checks the wrong property. The real options for confidential work are contract, local, or extraction — and extraction is judgment, not tooling.