[bongodongobob]

You allow what it can and can't see. If you include PII and medical records, that's your fault, not MS's.

[sailfast]

That’s fair - unless they’re marketing the bot as compliant.