<?xml version="1.0" encoding="UTF-8"?>
<!--
  itzal.ai — sitemap.xml
  Generated from the URL map in ../site-structure.md §1.

  Two rules govern what is in this file:

  1. A URL appears here only if the page is publishable — no {{PLACEHOLDER}}
     tokens and no open row against it in ../VERIFY-BEFORE-PUBLISH.md.
     Submitting a URL that 404s or renders a placeholder wastes crawl budget
     and is read as a quality signal. The gated URLs are listed, commented
     out, at the bottom: uncomment each one as its blocker clears.

  2. <lastmod> mirrors the page's `lastUpdated` frontmatter, which must be a
     real edit date. A sitemap that claims every page changed today is
     discounted wholesale, and a stale date on a compliance page is worse
     than no date at all.

  Priority follows site-structure.md §1. It is a relative hint within this
  site only; it says nothing to a crawler about other sites.

  On regeneration: this file should be emitted by the SSG from frontmatter,
  not hand-maintained. Until that exists, it is hand-maintained — and the
  pre-launch checklist in VERIFY-BEFORE-PUBLISH.md §5 gates it.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9
                            http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">

  <!-- ===================================================================
       Built and indexable — 23 pages
       =================================================================== -->

  <url>
    <loc>https://itzal.ai/</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>

  <url>
    <loc>https://itzal.ai/privacy-architecture</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://itzal.ai/product</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://itzal.ai/product/coverage</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/product/detection-engine</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/product/browser-extension</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/product/admin-console</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/product/deployment</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/solutions/healthcare</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/solutions/financial-services</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/solutions/higher-education</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/answers</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/answers/stop-employees-pasting-sensitive-data-into-chatgpt</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/answers/does-chatgpt-train-on-pasted-company-data</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/answers/ai-dlp-vs-casb-vs-endpoint-dlp</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/answers/dlp-without-reading-employee-messages</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://itzal.ai/glossary</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/glossary/ai-dlp</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/glossary/shadow-ai</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/glossary/on-device-redaction</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/glossary/sanctioned-ai-tool</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/glossary/coverage-gap</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://itzal.ai/compare</loc>
    <lastmod>2026-09-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>

  <!-- ===================================================================
       Gated — built, but noindex until a blocker clears
       ===================================================================

       Each of these exists as a page and is deliberately noindex. The blocker
       is named beside it. Uncomment when it clears, and drop the noindex meta
       from the page itself at the same time.

  Blocker: a named reviewer. A compliance page must not publish anonymously
  (SEO-AEO-PLAYBOOK.md §7, VERIFY-BEFORE-PUBLISH.md §1).
  <url><loc>https://itzal.ai/compliance/hipaa-and-ai-tools</loc></url>
  <url><loc>https://itzal.ai/compliance/gdpr-and-ai-tools</loc></url>
  <url><loc>https://itzal.ai/compliance/pci-dss-and-ai-tools</loc></url>
  <url><loc>https://itzal.ai/answers/is-monitoring-employee-ai-use-legal</loc></url>

  Blocker: real figures. Do not publish placeholder pricing.
  <url><loc>https://itzal.ai/pricing</loc></url>

  Blocker: CONTACT_WEBHOOK_URL set on the Worker, and one test submission
  received. The endpoint itself exists (src/index.js) and is first-party;
  unconfigured it answers 503, which is not a page to index.
  <url><loc>https://itzal.ai/contact</loc></url>
  <url><loc>https://itzal.ai/demo</loc></url>

  Blocker: certification status written honestly, and a security contact.
  <url><loc>https://itzal.ai/security</loc></url>

  Blocker: sameAs profiles and named people. This page is the Organization
  entity source; weak here propagates everywhere.
  <url><loc>https://itzal.ai/about</loc></url>

  Blocker: named authors with real bios. "The Itzal Team" is worth nothing.
  <url><loc>https://itzal.ai/blog</loc></url>

       Never in this file:
         app.itzal.ai  — console, noindex, disallowed
         api.itzal.ai  — no crawler surface
         /brand         — internal design reference, noindex
  -->

</urlset>
