Remote contextual inquiry with sensitive data

As part of an upcoming redesign project, I would like to conduct a contextual inquiry with some of our users. Due to COVID, I'm being advised to do this remotely (I normally would do this in-person).

Our product uses highly sensitive personal information. I've been told that real-time screen recordings that contain the sensitive information are prohibited (with good reason - someone could hack into the cloud recording system and breach the sensitive information).

Unlike playback recording software, I can't mask sensitive fields in real-time. And because I want to do a contextual inquiry to understand the current state, using "dummy data" wouldn't be correct.

Is my only option to do the exercise without recording the screen, and try to take the best possible notes? I suppose I could still capture audio and facial expressions (after asking the user to not vocalize any sensitive info), but is there an option I might be missing?