How do you ensure data security and governance when building an Agentic AI solution for a highly regulated client?