95% of U.S. companies use generative AI. 67% of security teams worry it will expose sensitive data. Most RAG systems treat every document as equally accessible. An intern’s question can surface the same patient records or financial projections only the C-suite should see. SharePoint permissions exist. The AI ignores them unless you build it not to.