3 ms·

The choice of desktop vs web for email boils down to whether you are an individual user or an Enterprise. I suspect that Xobni is targeting the enterprise. Othe

by bharath 19y ago

The choice of desktop vs web for email boils down to whether you are an individual user or an Enterprise. I suspect that Xobni is targeting the enterprise. Otherwise, I dont see the point of an outlook plugin. Software as a service has been and will continue to be a hardsell for enterprises due to the security considerations of having a third party handle your proprietary information. Its not just about paranoid IT admins. Companies will probably need dedicated mail servers to be in line with Sarbanes Oxley and other regulatory laws.

rms 19y ago
So it is always a violation of Sarbanes Oxley for a public corporation to use Google Apps/Gmail?
- bharath 19y ago
  I did not say that. But they will need a 3rd party auditor to certify that Gmail is "secure" -- whatever that means. SOX has caused more pain than transparency..
  - rms 19y ago
    Thanks for the answer, I didn't know how third party data storage worked under SOX.
  - bilbo0s 19y ago
    They will need to prove more than that. The people sending the mail have certain fiduciary duties to the shareholders of the corporation. It will take some doing to convince an arbiter or, God forbid, a federal judge, that giving clear text copies of internal corporate communications to a third party is consistent with those obligations. Especially since the EULAs of these services typically oblige an enterprise to use the "...It's OK...they promise not to read it" defense. Even better, an employee of one of these services, quite innocently, sells some of a client corporation's stock. That corporation better hope to whatever they consider Holy that the stock refrains from dropping for a while. SOX makes it a good deal easier to prosecute lots of different parties to the appearance of impropriety. Guilt and innocence goes out the window. What matters is what is LEGAL, and a little something called "burden of proof". In my own opinion, it is so low now that a sick kindergarten age child could hurdle it. Unless you are a VERY good lawyer, or you can afford one, or preferably 10, I would advise you to stay away from any SOX entanglements. Sell the enterprise some software to run on their own servers, DO NOT offer to manage it if you are a startup. That said, if you can afford the battalion of attorneys, move forward with your plans. Keep in mind however, indemnity clauses in the new SOX era means you go to prison WITH them should anything go horribly awry.

by bharath 19y ago

rms 19y ago

So it is always a violation of Sarbanes Oxley for a public corporation to use Google Apps/Gmail?

bharath 19y ago
I did not say that. But they will need a 3rd party auditor to certify that Gmail is "secure" -- whatever that means. SOX has caused more pain than transparency..
- rms 19y ago
  Thanks for the answer, I didn't know how third party data storage worked under SOX.
- bilbo0s 19y ago
  They will need to prove more than that. The people sending the mail have certain fiduciary duties to the shareholders of the corporation. It will take some doing to convince an arbiter or, God forbid, a federal judge, that giving clear text copies of internal corporate communications to a third party is consistent with those obligations. Especially since the EULAs of these services typically oblige an enterprise to use the "...It's OK...they promise not to read it" defense. Even better, an employee of one of these services, quite innocently, sells some of a client corporation's stock. That corporation better hope to whatever they consider Holy that the stock refrains from dropping for a while. SOX makes it a good deal easier to prosecute lots of different parties to the appearance of impropriety. Guilt and innocence goes out the window. What matters is what is LEGAL, and a little something called "burden of proof". In my own opinion, it is so low now that a sick kindergarten age child could hurdle it. Unless you are a VERY good lawyer, or you can afford one, or preferably 10, I would advise you to stay away from any SOX entanglements. Sell the enterprise some software to run on their own servers, DO NOT offer to manage it if you are a startup. That said, if you can afford the battalion of attorneys, move forward with your plans. Keep in mind however, indemnity clauses in the new SOX era means you go to prison WITH them should anything go horribly awry.