We are using Debugdiag when analyzing memory dumps,
The dump itself may contains sensitive customer data.
The question, is the report being generated by debugdiag, can contain sensitive data?

e.g the report will contains memory addresses of function, variables instances count and memory sizes, but it does not contain the data inside those variables (from what we have seen physically in the .mht file)

The question,
Who can guarantee that if i have social security number in one of my String object, it wont be printed somehow on the debugdiag report? Is Microsoft meeting any security compliance in this matter?

Thanks