No. Before release a contact is readable only by the employee whose mailbox it came from. Not Marketing, not their manager, not IT, not illuminis.
Before release, a contact is readable by exactly one person: the employee whose mailbox it came from. Not Marketing, not their manager, not IT, not an administrator and not illuminis.
Unreleased contacts sit in a physically separate store in the database that every other read path refuses. It is a property of the data model, not hidden columns one query away from visible.
Before release, Marketing sees only how many contacts each employee has waiting and for how long. No name, no address, no company, no search and no export. That is enough to chase the rollout without holding a record nobody approved.
See RelationLens.