Fundamentally, anything going to a second or third party puts you at risk of being ensnared by mandatory reporting laws, whether that is a human or a corporate entity. Loose lips sink ships.