Einstein Activity Capture: Sensitive Emails — How "Don't Capture Sensitive Emails" and "Don’t Capture Automated Emails" Work

What EAC Detects as "Sensitive"

The sensitive email filter identifies the following types of personally identifiable information (PII):

• US Social Security Numbers (SSN)
• US Driver's License numbers
• Canada Social Insurance Numbers (SIN)
• Typical credit card numbers
• Known Limitation: General banking information such as bank account numbers and routing numbers is not recognized by the filter.

What EAC Detects as "Automated"

• Emails from addresses like no-reply@, postmaster@, or generic functional addresses like payments@, group@ and similar are identified as Automated

Known Limitations

• The sensitive email filter uses the word "attempts" intentionally — it is not a guaranteed catch-all. Some emails containing sensitive data may still be captured if they do not match the recognized patterns.
• Customers have reported instances of bank account details and passwords still being captured despite the setting being enabled. This is expected behavior, not a bug — the filter is best-effort only.
• General banking information (bank account/routing numbers) is not recognized by the PII filter.
• The Calendar Notifications rule applies to Google only; Outlook calendar notifications are not currently flagged.