How will sensitive data be handled during the VAPT process?