How is security handled between Sitefinity and external models?

Sitefinity connects to external LLMs through Progress Agentic RAG using secure, outbound API calls. Traffic is protected with TLS encryption in transit and access is limited to authenticated endpoints. External models never connect directly to the Sitefinity platform. Progress Agentic RAG controls what content is sent, can apply filtering or masking to sensitive fields and can restrict what is stored or logged. Access follows least-privilege principles and activity can be audited so content use by the LLM stays traceable and controlled.