Ed [..] > That's all good advice, Ron, but this isn't for our own in-house use. > We're looking to become one of those companies which serve the "58% of > companies with fewer than 500 employees". Currently, we produce a > respectable desktop payroll product which we're looking to evolve into > a > web app. > > Eventually, we'll have to run our own data center, but during our > start-up > phase, we are looking into the viability of using a host. > > Which brings me back to the original question: what are the "right > questions" to be asking if I'm looking for maximum security and maximum > reliability? Have you thought about using Cloud hosting; specifically AWS? Here's a whitepaper on AWS security. http://aws.amazon.com/about-aws/whats-new/2008/09/05/amazon-web-services-security-whitepaper/ Even if you've already decided against a Cloud platform, this may give you some idea of some sensible questions to ask. Cheers! -- Christopher Marsh Technical Architect christopher.marsh at akqa.com | http://www.akqa.com AKQA, 1 St John's Lane, London EC1M 4BL, UK Revolution Agency of the Year 2010 IAB Creative Showcase Agency of the Year 2009 Creative Review Agency of the Year 2009 Microsoft Digital Agencies Partner 2009 Registered in England: 2964394 Confidentiality notice: The information transmitted in this email and/or any attached document(s) is confidential and intended only for the person or entity to which it is addressed and may contain privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.