Data Protection for Email by Material Security classifies and protects sensitive content with right-sized access controls. It safeguards email data in the mailbox, preventing unwanted exposure more effectively than outbound detection. Material Security syncs employee mailboxes over time, creating a structured model of historical content. The solution includes built-in content classification categories and allows for custom categories based on business needs. Email messages with sensitive data are redacted based on a grace period, replaced with a message explaining the data lock and retrieval process. Locked messages include an authentication prompt, and if the user is valid and passes the challenge, the original message is restored. If the challenge fails, the email remains locked, and incident response teams are notified. Material Security's Data Protection for Email also enables longer retention policies without increasing the risk of data loss by redacting archived sensitive emails. It replaces traditional DLP alerts with a secure end-user workflow powered by the existing identity provider.