Data sensitivity is divided into several tiers: public data can be sent freely; the compliance of internal business data depends on industry regulation (such as finance, healthcare and government affairs, which often have hard rules); personally identifiable information (PII) and trade secrets generally cannot be sent out. Even if the provider promises not to use it for training, the data still leaves the local environment.