My device is not enforced or my email app. But, there is an option in the settings to set a passcode for the email app.
The admin user manual says:
If Passcode is set to None, then the app is not encrypted. If you do
not enforce an app-level passcode, then consider enforcing a device-level passcode using a device profile, which encrypts the device.
I think that I do not need to set an app-level passcode because my phone is already set with a device-level passcode to unlock the phone and Strong Protection is enabled as well which means the contents of the phone is encrypted.