Use write-time transforms to suppress or hash sensitive fields during ingestion. Configure row-level access controls to restrict data visibility based on user roles and compliance requirements.