Comment by duttish

A thought if you want to sell to companies, "with per-user keys that get shredded when a user decides to delete their account."

You'll need soft delete, work messages belong to the employer and not the user.