Pax only does what you allow, asks when it is unsure, and logs and can reverse every action. The Trust Center documents how your data is handled.