> In that timeframe there were several SaaS email providers that were very secure. A couple were even certified as HIPAA Associated Business Entities (for certa

> In that timeframe there were several SaaS email providers that were very secure. A couple were even certified as HIPAA Associated Business Entities (for certain limited use cases). That's a high standard of security. Thank you for saying this. In this crises we're comparing a government IT department that can't keep audit logs via .pst, imap, or exchange and comparing it to a non-cloud provided private email server. Both should be considered inept in 2008 and certainly now. Unfortunately, the assumption is that the government IT is somehow trustworthy.