Comment by tjruesch

that's exactly right. PII stays local (and the PII-Tag-Map is encrypted)