The Redis instrumentation currently reports all queries in an unsanitized fashion. This means that any Personal Identifiable Information (PII) data those queries contain, like email addresses and passwords, is sent to AppSignal. This will be configurable in a future version of the Redis instrumentation.
For HIPAA-covered entities, more information about signing a Business Associate Agreement (BAA) can be found in our Business Add-Ons documentation.