AIToday
Large Language ModelsAI Safety & AlignmentOpen-Source AIPractical AIPublished: Nov 14, 2026, 04:00 JST

Lorenzo Sani: federated learning fits agentic AI's private data

Send on LINE
Lorenzo Sani: federated learning fits agentic AI's private data

3 Key Points

  1. What happened

    On the Practical AI podcast, Flower Labs research scientist Lorenzo Sani said federated learning—moving the training pipeline to where data is collected—is a natural way to train agentic AI on distributed, private trajectories.

  2. Why it matters

    Agent trajectories contain user prompts and tool interactions that are often sensitive, and Sani argues open-weight models give developers more control to fix privacy issues than closed models.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Context & Analysis

Sani's argument builds on his experience developing federated learning tools for language model training during his PhD at Cambridge, where the goal was not only privacy but also access to new data sources that would otherwise be unavailable. He notes that federated learning is already being tried in industry, though some companies abandon it when the techniques prove inconvenient for their specific use cases. The conversation situates agentic AI as a step up in complexity: agents can take actions, branch into sub-agents, and interact with external services, producing trajectories that mix model outputs, user prompts, and third-party tool calls. Because those trajectories can contain sensitive personal context, Sani sees federated learning as a natural way to train on them without centralizing the data. He also flags that privacy guarantees from techniques like differential privacy depend on the setting and are not universally applicable.

FAQ
What is federated learning in simple terms?
It is a way to train a machine learning model by moving the training computations to where the data is collected, such as phones or laptops, so the raw data never leaves its source.
Why does agentic AI make privacy harder?
Agents can take actions, read files, and call sub-agents, so long-running trajectories accumulate more personal information—prompts, environment details, and tool outputs—than a single model interaction.
Do open-weight models offer better privacy control than closed models?
Sani says open-weight models give developers more techniques to probe and fix privacy issues, while closed models are harder to inspect or repair if something breaks.
Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articlePauseAI UK's March Against AI Extinction: Joseph Miller weighs impact