In the US you should assume a company examines/logs everything over their network, not just email. There's a whole "data loss prevention" industry.