Antispam third party service security

Hello All,

We are trying to implement an Antispam cloud service. All of our inbound emails will be passing through them first and then relayed to us.

I am a little concern if they will be holding a copy of our emails somewhere and wanted to know if there is anything that I can ask them to provide to us in order to assure confidentiality, something that will also serve us to provide to our IT auditors in the future.

Any ideas will be greatly appreciated.

Thanks!
LuiLui77Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jhyieslaCommented:
Basically you need to do just what you said - ask them if they are a store and forward service or just a forward service.  Then ask for documentation showing proof of their statement and I'd consider putting it into the contract if possible. If they are going to store them at all and you're OK with that - which isn't necessarily a bad thing, you need some signed documentation showing the level of security they have on their systems.  As  company we usually write these kinds of things either into the contracts or as a part of a Business Associate agreement. If they don't offer what you need or can't provide the signed documentation or you have some uneasiness about them, I'd move on to another service.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
LuiLui77Author Commented:
Great advise, thank you jhyiesla!

I will be asking them for it.
0
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
We are using Fusemail where they not only provide anti-spam and anti-virus but they provide web browser access to email functionality in an event of your in-house mail failure.  Look at their website for email security and email continuity features so that you could ask for same thing from your provider.  Their website is www.fusemail.com
0
LuiLui77Author Commented:
Hello All,

All documents need were provided. I had to sign an NDA though, which it sounds logical.

Thanks to you all!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
AntiSpam

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.