Data loss prevention and eDiscovery are already established cottage industries of their own. As with any baked-in tools, you can probably find more robust, comprehensive third-party tools. Still, the data protection features of Exchange will probably suffice for many organizations.