We do indeed have the process in place for sensitive data exports - it's a bit involved, as it has to be, but we've done it more than once for our Subscriptions product.