Default
Managed
Encrypted on the way and at rest, with keys that belong to that organisation. Admins can set retention, export, and recover a history after an account is restored.
- Search on the server, inside that tenant only
- Export is its own permission, not a side effect of being an admin
- If staff can be read by an admin, they are told, and every access is logged