Logs are sanitized locally before any submission. Filenames, document contents, model contents, and conversations are never uploaded without explicit permission.