Using Claude Code on Indian bank data without sending a single PAN
AI coding assistants are most useful exactly where the data is most sensitive. In a bank or an NBFC, the notebooks, logs and call notes that Claude Code reads are full of PAN, Aadhaar and mobile numbers - and RBI guidance, the DPDP Act and PCI DSS all say those should not reach an external model.
This post shows Claude Code running through credgate, an open-source proxy that applies a policy to every request: identifiers are tokenised or redacted before anything leaves the machine, the real values are put back into the answer for you, and every decision is written to a tamper-evident audit log.