Aggregate DMARC reports do not include any PII or any other sensitive information, however, Forensic Reports may inadvertently leak this type of information. If you are concerned about possible PII exposure only enable Aggregate reporting.