Is sending emails between different Office 365 account owned by entirely separate entities secure? I.e. The email never leaves the Microsoft network? If the two are in the same data centre (E.g. Ireland) then I'd assume this is the case but is it the same between data centres? I've seen this: https://technet.microsoft.com/en-GB/library/dn751021(v=exchg.150).aspx for setting up secure connections to services outside of Office 365 but that doesn't cover internal situations. --- Edit to add: By secure, that the email and it's contents aren't travelling between servers unencrypted and over the public internet. For example, if I send a document to Colleague A (Bob), and their mailserver is old and has no TLS setup, my email will be sent, over the public internet unencrypted. Or Bob's mailserver does support encryption however Bob has setup his POP3 mailbox on his client to connect to it without any security, so whilst my email get's to his mailserver encrypted, he downloads it across the public internet unencrypted. In both these examples, the email and their contents are not secure, they could be intercepted and read without any problems, potentially by any and every network they cross. On the flip side, does Office 365 maintain the email traffic internally? Even between data centres? Or do the emails go over the public internet at any point? I would assume they are encrypted but is there any documentation to this effect? I have been unable to find anything.