Sensitive intake is a contact flow that may collect highly personal information, such as identity details, health context, crisis reports, or other private data. It often appears in help forms, support widgets, hotlines, case-reporting portals, and intake pages where a user is asking for assistance. Because the user is already in a vulnerable situation, the interface must be designed to collect only what is necessary and to protect it from the first click.
In cyber security, sensitive intake matters because it can become a high-value data path. Poorly designed forms can overcollect data, expose free-text fields to unnecessary staff, or store records longer than needed. Attackers may target these systems to steal sensitive personal data, abuse weak access controls, or harvest metadata. Defenders reduce risk with data minimization, clear consent and notice text, strict permissions, short retention, and secure handling across web, phone, and in-person channels.