Data boundary
Can the public demo receive private client documents?
No. Public Mike.ai routes are limited to fictional, sample, redacted, or metadata-only data. Production health keeps document body storage disabled.
Next evidence: Named-user auth, workspace membership, object storage, retention, deletion, and audit export before private client documents.