Is any mailbox or threat data stored or logged outside our tenant?

Yes, mailbox and threat data are processed and logged securely in our US-based AWS environment, outside of your tenant.