@billvencil 

I don’t believe there is. 

You can now delete previous instance history but you would need an admin to do that.

At one of my clients where we had a sensitive HR workflow, we set up an additional NAC instance which had very limited admin access and then ran the workflow from that seperated instance.

Hi @billvencil 

@Gavin-Adams is correct, all admins have the ability to see sensitive submission data, in the instances. 
 

as admins they have the ability to review and access instances for troubleshooting and assisting end users. 
 

The only option would be to provision a dedicated HR tenant where the admin access is controlled using your own internal service account procedure. 
 

I cannot say if this is something you are entitled to however I would recommend reaching out to your account manager to speak with them about your concerns. 
 

I think it might be a good idea to raise a feature request on https://ideas.Nintex.com that suggests being able to mark a workflow as “private and confidential” so that instance information is restricted and controlled or obfuscated so that 2 admins or approval is required to access etc. 

I would vote for that! 

Thanks all!