How to meet it
OWASP AISVS v1.01
Memory, Embeddings & Vector Database Security · Memory Expiry & Revocation
Quarantined content stays out of results
Verify that quarantined content is retained but excluded from all retrieval results.
OWASP AISVS v1.01, requirement 8.3.3
In plain English
Keep quarantined content for investigation, but make sure it never appears in search results.
What good looks like
- Quarantined items are flagged and excluded from all retrieval.
- They are kept for review and evidence.
- Release from quarantine needs approval.
How teams usually do it
- A quarantine flag enforced by the retrieval service, or a separate store.
Evidence an auditor would accept
- Tests showing quarantined items do not appear.
Common mistakes
- A quarantine flag that one retrieval path ignores.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.