Audience follow-up on privacy implications of logging domain objects to third-party observability vendors. Callaghan answers: use Rails' parameter filter class, configure it with regex/strings for sensitive attribute names (email, credit card, etc.), and pipe all observability payloads through it in one central place rather than scattering filter_parameters throughout the code. Vendor-side redaction also exists but ideally PII shouldn't leave the app.