Users may paste confidential data; unclear retention and redaction expectations.
Detect and redact sensitive data before sending.
Need SSO/SAML, SCIM, audit logs, and data residency guarantees.