Abstract: A method for evaluating data by a generative artificial intelligence (AI) model to determine for an original query containing sensitive data a result and a reason for that result without leaking substantially any of the sensitive data, the method comprising: separating non-sensitive data of the original query and at least one type of the sensitive data; reducing each respective one of the at least one type of sensitive data to one enumerated output selected from a prescribed number of options for that respective type of sensitive data; expanding each enumerated output to a respective expanded form that is usable by the generative AI model; combining the expanded forms with the non-sensitive data to form a prompt; and submitting the prompt to the generative AI model.