@@ -169,7 +169,7 @@ set.
 | `{PREFIX}SENTRY_PROFILES_SAMPLE_RATE` | `0.1` | Profiler sample rate. |
 | `{PREFIX}SENTRY_PROFILE_SESSION_SAMPLE_RATE` | `0.1` | Profile session sample rate. |
 | `{PREFIX}SENTRY_PROFILE_LIFECYCLE` | `"trace"` | Profile lifecycle mode: `"trace"` or `"manual"`. |
-| `{PREFIX}SENTRY_ENABLE_LOGS` | `true` | Forward log records to Sentry. |
+| `{PREFIX}SENTRY_ENABLE_LOGS` | `false` | Send log records to Sentry Logs. Log records can contain credentials and personal data. sentry-sdk 2.68.0 and later ignore this option. With these versions, set `capture_sentry_logs=True` on `LoggingIntegration` or `LoguruIntegration` and pass the integration to `boot(sentry_integrations=...)`. |
 
 #### OpenTelemetry (`{PREFIX}OTEL_`)
 
 
@@ -182,7 +182,7 @@ This file provides an overview of all modules in `aignostics_foundry_core`, thei
 
 - **Purpose**: Bootstraps Sentry SDK with all project-specific metadata supplied as explicit parameters, making the initialisation reusable across any project without hard-coded constants.
 - **Key Features**:
-  - `SentrySettings(OpaqueSettings)` — uses the active FoundryContext.env_prefix to derive the env prefix (`{ctx.env_prefix}SENTRY_`). Fields: `enabled`, `dsn` (validated HTTPS Sentry URL), `debug`, `send_default_pii`, `include_local_variables` (default `False`; frame locals are not sent), `max_request_body_size` (`"never"` | `"small"` | `"medium"` | `"always"`, default `"never"`; request bodies are not sent), `trace_propagation_targets` (`list[str]` of URL regexes, default `[]`; no outbound request gets `sentry-trace` or `baggage` headers; the env var takes a JSON list), `max_breadcrumbs`, `sample_rate`, `traces_sample_rate`, `profiles_sample_rate`, `profile_session_sample_rate`, `profile_lifecycle`, `enable_logs`
+  - `SentrySettings(OpaqueSettings)` — uses the active FoundryContext.env_prefix to derive the env prefix (`{ctx.env_prefix}SENTRY_`). Fields: `enabled`, `dsn` (validated HTTPS Sentry URL), `debug`, `send_default_pii`, `include_local_variables` (default `False`; frame locals are not sent), `max_request_body_size` (`"never"` | `"small"` | `"medium"` | `"always"`, default `"never"`; request bodies are not sent), `trace_propagation_targets` (`list[str]` of URL regexes, default `[]`; no outbound request gets `sentry-trace` or `baggage` headers; the env var takes a JSON list), `max_breadcrumbs`, `sample_rate`, `traces_sample_rate`, `profiles_sample_rate`, `profile_session_sample_rate`, `profile_lifecycle`, `enable_logs` (default `False`; no log records go to Sentry Logs; sentry-sdk 2.68.0 and later ignore it and use `capture_sentry_logs=True` on `LoggingIntegration` or `LoguruIntegration`)
   - `sentry_initialize(integrations, *, context=None)` — derives all project-specific values (name, version, environment, URLs, runtime flags) from *context* (or the global context); env prefix and env file are read from `ctx.env_prefix` and `ctx.env_file`; initialises Sentry SDK when enabled and DSN present; sets `aignx/base` context; removes the query string and the fragment (`http.query`, `http.fragment` and the query of `url`) from HTTP breadcrumbs and from the span data of transactions, through `before_breadcrumb` and `before_send_transaction` hooks; suppresses noisy loggers; returns `True` on success, `False` otherwise
   - `set_sentry_user(user, role_claim)` — maps `sub` → `id`, `org_id` and the optional role claim into Sentry scope; no other claims (no email, name or other personal data); pass `None` to clear context; no-op when `sentry_sdk` is absent
 - **Location**: `aignostics_foundry_core/sentry.py`
 
@@ -318,8 +318,13 @@ def __init__(self, **kwargs: Any) -> None:  # ruff: ignore[any-type]
     enable_logs: Annotated[
         bool,
         Field(
-            description="Enable Sentry log integration (https://docs.sentry.io/platforms/python/logging/)",
-            default=True,
+            description=(
+                "Send log records to Sentry Logs (https://docs.sentry.io/platforms/python/logs/). "
+                "Off by default, because log records can contain credentials and personal data. "
+                "sentry-sdk 2.68.0 and later ignore this option: set capture_sentry_logs=True on "
+                "LoggingIntegration or LoguruIntegration instead."
+            ),
+            default=False,
         ),
     ]
 
 
@@ -1,6 +1,7 @@
 """Tests for aignostics_foundry_core.sentry."""
 
 import json
+import logging
 from collections.abc import Callable, Generator
 from typing import TYPE_CHECKING, Any
 from unittest.mock import patch
@@ -11,6 +12,7 @@
 import sentry_sdk
 from fastapi import FastAPI
 from fastapi.testclient import TestClient
+from loguru import logger
 from pydantic import ValidationError
 from sentry_sdk.client import NonRecordingClient
 from sentry_sdk.transport import Transport
@@ -59,6 +61,8 @@
 _PARTNER_URL = "https://partner.example.org/"
 _SENTRY_TRACE_HEADER = "sentry-trace"
 _BAGGAGE_HEADER = "baggage"
+_APP_LOGGER_NAME = "app"
+_LOG_ITEM_TYPE = "log"
 
 
 class _CapturingTransport(Transport):
@@ -354,6 +358,21 @@ def test_failed_fastapi_request_event_has_request_data_when_always(
         (event,) = sentry_capture.items("event")
         assert event["request"]["data"][_SECRET_LOCAL_NAME] == _SECRET_LOCAL_VALUE
 
+    def test_sentry_logs_not_sent_by_default(
+        self, sentry_capture: SentryCapture, caplog: pytest.LogCaptureFixture
+    ) -> None:
+        """No INFO record from the stdlib logging module or from loguru goes to Sentry Logs at default settings.
+
+        The ``app`` logger is set to INFO, so that the record gets to the handlers of the Sentry
+        logging integration.
+        """
+        caplog.set_level(logging.INFO, logger=_APP_LOGGER_NAME)
+        sentry_capture.start()
+        logging.getLogger(_APP_LOGGER_NAME).info("stdlib record for %s", _PROBE_MESSAGE)
+        logger.info("loguru record for {}", _PROBE_MESSAGE)
+
+        assert sentry_capture.items(_LOG_ITEM_TYPE) == []
+
 
 @pytest.mark.integration
 class TestSentryHttpData: