Defend flags something that is not sensitive

Audience: users and administrators. Editorial review: 2026-09-15.

A false positive is a detection that does not match the expected risk in that context. It does not mean you should disable all protection.

Steps

1. Review the highlighted item and its category.
2. Check your organization’s policy before deciding it is not sensitive.
3. If your version offers review options, use them only within your permissions and check the result.
4. To improve a rule, give your administrator an invented sample that reproduces the case.

Expected result

The case is reviewed without sharing the original. Automatic learning is not promised, and a decision is not guaranteed to apply to other conversations, people or documents. Review every send in context.

More help

See check protection, troubleshooting and frequently asked questions. If the issue persists, contact your administrator without sharing sensitive data.