• Instant communication data is treated as part of the body of business information; privacy and security governance, retention policies, and controls are equally applied to protect confidential and sensitive company data transmitted over messaging applications.