Gmail’s confidential mode — the privacy-preserving email feature Google launched last April — is now available in beta for G Suite customers, the Mountain View company announced today. Google also rolled out changes to G Suite’s data retention and export toolset, Google Vault, in the form of newly supported content types: Gmail confidential mode emails and Jamboard files from Google Drive.

Confidential mode, you might recall, allows email senders to create expiration dates, revoke previously sent messages, and remove options for recipients to forward, copy, print, and download via built-in Information Rights Management (IRM) controls — all toward the goal of protecting highly sensitive or personal content. Optionally, users can require two-factor authentication via text message to view an email, which Google contends makes it easier to preserve a message’s integrity even if a recipient’s account is compromised.

Confidential mode is switched off by default; enabling it requires heading to G Suite’s Admin console, navigating to Apps > G Suite > Settings for Gmail > User settings, and looking for the “Enable confidential mode” checkbox. When it’s active, users see a button (to the right of the “insert image” shortcut on the toolbar beneath the message body) to turn on confidential mode for an individual email. It opens a pop-up where they can set an expiration date or require a passcode, or remove access to a message early before said expiration date.

Here’s how it all works from the recipient’s end: Google sends a link to the content, and if it’s opened in Gmail (either on the web or in an app), it displays the content of the message in-line. If the recipient isn’t a Gmail user, they have to click to view the email in a separate Google Cloud-hosted portal.

Google notes that confidential mode has its limitations. It won’t prevent folks from snapping screenshots or photos of messages or attachments, or from accidentally forwarding them to someone. And Google Vault retains all confidential messages sent by users within an organization (but doesn’t allow the content or attachments from external confidential messages to be searched). Still, it believes confidential mode has the potential to “dramatically” cut down on malicious actors’ ability to access sensitive information.

In somewhat related news, Google Vault also now automatically preserves files from Jamboard, Google’s interactive whiteboard, saved in Google Drive. Admins can apply the same retention rules set for Drive, and search within Vault for files with the “type:jam” search operator (or preview and export them).