Comment by wolvoleo

Encryption wise they do have a feature called customer key which allows zero knowledge processing on their side.

However turning this on reduces the feature set of m365 massively so almost nobody actually uses it.