Having worked support for an infra company that requested similarly sensitive information, it is _wild_ to me that: - customers wouldn't scrub sensitive detail

Having worked support for an infra company that requested similarly sensitive information, it is _wild_ to me that: - customers wouldn't scrub sensitive details from support HARs, unless those details were required for the issue - if customers weren't required to submit sensitive details, that Okta support wouldn't have a tool to scrub any accidentally included from the support system (looks like it's SFDC-backed) - if sensitive details were required, that Okta support didn't have an extremely tight data retention policy, in terms of hours not days, with active enforcement These kinds of things were hard requirements just as presales demands from fintech and healthcare customers, much less for certification.