A privacy gateway that lets analysts use Copilot/LLMs for KYC without sending raw PII. KPG detects and tokenises identifiers, performs internal retrieval on bank systems, and forwards only sanitised excerpts to the LLM for summarisation. Everything is audited.