How to meet it
OWASP AISVS v1.01
Memory, Embeddings & Vector Database Security · Access Controls on Memory & RAG Indices
Scope every retrieval
Verify that retrieval operations enforce scope constraints.
OWASP AISVS v1.01, requirement 8.1.3
In plain English
Every retrieval should be limited to the documents in scope for that user, tenant and task.
What good looks like
- Scope filters are applied on every query, in code.
- Missing scope values cause the query to fail.
- Tests check queries cannot reach out-of-scope data.
How teams usually do it
- Mandatory metadata filters added by a retrieval service.
Evidence an auditor would accept
- Retrieval code and tests.
Common mistakes
- A query path that skips the filter when the scope value is empty.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.