If I setup an email synchronization with our Exchange server, is the mail I store on my phone encrypted or readible if someone finds/steals my phone?

I have enabled the unlock password (although it's not easy to unlock), but it is very easy to remove the sd-card from the phone. Is the information on that SD-card readible for a "finder", or is it not stored on the sd-card anyway.