The Agent-to-Agent Privacy Problem: How PII Leaks Through Multi-Agent Systems

Multi-agent AI architectures are becoming standard infrastructure. One agent orchestrates. Another retrieves. A third synthesizes. A fourth acts. The privacy architecture to support this? Mostly nonexistent. Each agent-to-agent handoff is a data transmission event. Each tool call is a potential exposure point. Each accumulated context window is a growing PII surface. And unlike a single LLM API call — where you can clearly see what's being sent — multi-agent data flows are often opaque, chained, and hard to audit. This is the agent-to-agent privacy problem. It's underexplored and getting more urgent as agentic AI goes mainstream. How Multi-Agent Context Passing Works (and Where PII Leaks) In a typical multi-agent pipeline, a user request triggers an orchestrator, which delegates to specialized subagents: User → Orchestrator Agent ├── Research Agent (web search, retrieval) ├── Analysis Agent (data processing, reasoning) ├── Action Agent (API calls, file writes) └── Synthesis Agent (fina