The University of Iowa, in collaboration with several other universities, has negotiated strong contractual agreements with Microsoft, including a Business Associates Agreement (BAA) that covers HIPAA data. These agreements provide assurance that student data is very secure, and we have no privacy concerns with storing student e-mail in Microsoft data centers.