Its a little worrying that you plan to build to enterprise (I'm assuming you are in the UK), yet are asking one of fundamental questions about data security. Have you considered other security fundamentals that might be critical for an enterprise mail client?