All data retrieved from Microsoft 365 is retrieved via public Microsoft 365 APIs, which employ HTTPS as the transport mechanism. This means all data is encrypted in transit using TLS encryption (the encryption layer in HTTPS).