It's called a data processing agreement, where the data controller and data processor have an agreement how personally identifiable data is to be handled exactl

It's called a data processing agreement, where the data controller and data processor have an agreement how personally identifiable data is to be handled exactly. Protonmail is no exception to this as they still have access to unencrypted PII when they receive mail over SMTP.