All data retrieved from Office 365 is retrieved via public Office 365 APIs, which employ HTTPS as the transport mechanism. This means all data is encrypted in transit using TLS encryption (the encryption layer in HTTPS).