&gt; In that timeframe there were several SaaS email providers that were very secure. A couple were even certified as HIPAA Associated Business Entities (for certain limited use cases). That&#x27;s a high standard of security.<p>Thank you for saying this.<p>In this crises we&#x27;re comparing a government IT department that can&#x27;t keep audit logs via .pst, imap, or exchange and comparing it to a non-cloud provided private email server.<p>Both should be considered inept in 2008 and certainly now. Unfortunately, the assumption is that the government IT is somehow trustworthy.