Office 365 tenants can use Exchange transport rules to apply autosignatures to outbound email, including messages protected with encryption. You can even include some properties of the sender extracted from Azure Active Directory, and you can add an exception so that the autosignature isn't applied to replies.
https://office365itpros.com/2019/01/08/applying-protection-email-autosignatures/
