I worked at a firm that was regulated and audited by the SEC. The standard lesson from the compliance department was always to have potentially problematic conversations out loud instead of in email or Slack. They never needed encryption to avoid regulators.