Google is introducing what it refers to as client-side encryption (CSE), which enables Workspace clients to encrypt their own data before it enters Google’s servers.
Email attachments, inline pictures, & the email text are all secured when client-side encryption (CSE) is enabled. The recipients list, email header, subject, & timestamps are not.