Weigh an agent's access to EU customer records

Your company serves EU customers, and its contracts promise that their personal data stays in the EU. An engineer wants to switch on an AI coding agent that fixes bugs by reading application logs and querying a staging database. Staging holds a pseudonymized copy of real EU user records: names are replaced, but user ids, purchase histories and IP addresses remain. The agent's model runs in a US region.

Can you allow this? Decide what has to be true before the agent is turned on, and who signs off.