What happened?

Saleh Almohaimeed and four colleagues introduced a framework called Sensitive Entity Alias Generator (SEAG) that addresses the privacy problem in retrieval-augmented generation (RAG) systems. The study was published on arXiv on August 13, 2026. SEAG uses a lightweight model to detect sensitive entities (such as names, organizations, or personal data) and generates corresponding aliases, building a replacement table.

This table is used to replace sensitive words in the user query and retrieved documents before the data is sent to a third-party external generator model. This way, the external model can still produce a meaningful and accurate response without accessing the actual sensitive information.

Why does it matter?

Privacy research in RAG systems using large language models (LLM) has so far mostly focused on preventing unauthorized users from accessing sensitive data. However, according to the researchers, an overlooked issue was that external generator models could directly access the query and retrieved documents, creating a risk of misuse or unintended access to hidden information. SEAG allows users to benefit from powerful third-party generator models without having to share their sensitive information.

Findings

  • On the user metric, meaning the model's ability to answer users accurately while hiding sensitive information from the external generator, all SEAG models achieved over 80% accuracy.
  • The Qwen-3-based SEAG model achieved 77.83% overall accuracy in hiding all sensitive entities in documents.
  • The LLaMA-3.2-based model achieved 76.73%, and the Phi-4-based model achieved 74.91% accuracy.
  • The researchers created one dataset to train the SEAG models and a separate dataset to evaluate the framework.

What's next?

The study has been submitted to Knowledge-Based Systems and is expected to undergo peer review. On the arXiv page, PDF, HTML, and TeX source files are publicly available; details about code and data sharing have not yet been clarified.