PII Detectors Are Not Confidentiality Detectors
On 800 real Enron e-mails, Presidio ranked confidential mail no better than chance, and context-reading LLMs sent 12-17% of confidential mail to the cloud. A pre-registered benchmark, its inconclusive verdict, and what it means for an AI privacy gate.

