Processing pii through ActivePieces

I need to make sure ActivePieces isn’t storing any data or documentation sent through my workflow. I seriously cannot afford a lawsuit if you all got hacked and client data was taken.

Do you all retain and documents/email processed through ActivePieces?