> I assumed that Microsoft has security policies to ensure that all confidential information (e.g. non-open-source code and strategic discussions) is stored on

> I assumed that Microsoft has security policies to ensure that all confidential information (e.g. non-open-source code and strategic discussions) is stored on infrastructure controlled by Microsoft. It depends on how important the code is. I don't imagine MS will ever move Office or Windows to external servers, but a lot of other stuff is fair game. There is always a security/convenience trade off.