There is a difference between "datamining" and scanning. they could very well be scanning files that were shared by workspace accounts. They just wouldn't be allowed to use the verdict for anything other than flagging the content as a ToS violation.