GDPR PII detection results are recorded in the project_gdpr_flags table to track personal data sensitivity.