When a workflow executes all data for the workflow variables are available in the workflow instance start data in the NWC dashboard.

Some data that is captured on forms would include data that is personal private information (eg personal email, phone number, etc).

Thus the NWC instance data becomes an additional data store to be considered for data breach implications.

It would be great for either:
1) a global option when publishing the workflow to not capture variable values in instance start data

or

2) an optional variable by variable to not be captured in instance start data.