For simplicity and expediency we set up a mail server many years ago that we use for our clients. However, we are beginning to see some of our medical offices opt to use their own servers as HIPAA requirements become more important.
We have a form that we use to collect information for our IT team before install. We are going to start asking the customer if they want to use their own and allowing them to provide that information.
What is everyone else doing? We like the way we've been doing it but don't want to leave ourselves open to possible legal issues.
Thanks!