How do I check generated data for grounding and disclosure risk?

**Does generated mean safe?**

No. Generated material is not a guarantee of anonymity, privacy compliance or regulatory approval. Treat disclosure risk as something to inspect.

**What can I inspect for disclosure risk?**

- Identifiers, names, addresses and organisation names in remittance text. Search them against sources your team already knows. - Rare combinations, such as an unusual amount, date and payer type that would stand out. - Free-text notes that read like transcribed real correspondence rather than composed text.

**What can I inspect for grounding?**

- Whether amount distributions, payment lags and short-pay patterns look believable to someone who runs the process. - Whether policies and exceptions behave consistently from task to task. - Whether the handovers, such as who escalates to whom, match how the work is done in your domain.

**What should I ask MirrorFirm?**

Ask how the material was generated, what the generation approach is informed by, and what review the sample has been through. Ask what you are permitted to do if you find a problem.

**Who is responsible for the final check?**

You are, for your own use. Run your own review on a sample before any wider use, and record the result. MirrorFirm delivers generated, synthetic material, never real business records.