[...], we use a private mail server.
I will always recommend against running your own mail infrastructure. The administrative expense is to high in the long run. Unless you want to employ a 24/7 on-call admin team, Office365 is always the better choice. Email encryption can still be done client side (SMIME/PGP).