Email encryption options would work okay, but they are generally limited to one way encryption. Meaning their clients couldn't send back files encrypted. A better solution may be to use something like IPSwitch's web transfer module which you can use SSL with. You can find out more here: http://www.ipswitchft.com/Business/Products/WebTransferModul...
I've set this up for clients before and it's worked well.