most companies don't have to say anything like that. the absence of active encouragement is usually enough. the "default" is not to discuss sensitive topics over company email.