Email logs and reports can contain addresses, domains, IPs, subjects, identifiers and other metadata. Message bodies and attachments are substantially more sensitive.

Collect what operations and security actually require, restrict access, define retention, and avoid copying production message content into tickets or public troubleshooting tools without a clear need and authorization.