Encryption wise they do have a feature called customer key which allows zero knowledge processing on their side.
However turning this on reduces the feature set of m365 massively so almost nobody actually uses it.
However turning this on reduces the feature set of m365 massively so almost nobody actually uses it.
Vital government functions cannot be allowed to run on this type of infrastructure, it's ridiculous.