Overview
Your security department is curious on how to mitigate PII being in Bonzai analytics data that may flow to Google Analytics.
Solution
Some Personally Identifiable Information (PII) is likely present and should be removed. Perform the regex testing at the following link to see what type of data is actually present within your analytics.
A method to remove Personally Identifiable Information from Analytics is described in this article: Remove-pii-google-analytics-hits/