Any custom field can be made "sensitive," i.e.:

• Extra Fields in contact records
• Custom record Fields
  
• Case Management record Fields
• Form record Fields

You can also make the following records "sensitive":

• an individual contact record
• an individual communication record
• a specific Communication Type can be made sensitive. When this option is set, any communication record of that type will be made sensitive in Sumac