Email message events without Policy and PolicyAction fields

[ghost]

Hello,
We are collecting Office365 logs using the Management API and for the email message events, we are seeing logs without the Policy and PolicyAction fields. But the documentation states that these fields are mandatory.
Microsoft support told us that there are situations were these fields can be missing, particularly for messages treated and actions taken by Exchange Online Protection.
Could you clarify the documentation on this topic ?
Antoine