Something quiet is happening in how UK businesses handle their correspondence. The topic would have drawn blank stares at a board meeting five years ago; now it’s appearing in procurement checklists, cyber-security audits, and the due-diligence questions that come with winning public-sector contracts. The topic is business email, specifically, where it lives, who can read it, and what happens to it if things go wrong.
The catalysts are familiar to anyone following the business pages. High-profile cyber incidents have put every organisation’s digital hygiene under scrutiny. Data protection enforcement under UK GDPR has made information-handling practices a boardroom matter rather than an IT footnote. And the steady drip of revelations about how the largest technology platforms monetise user data has forced a more sceptical look at “free” services that British firms have relied upon for years.
The problem with borrowing your infrastructure
Here’s the uncomfortable arithmetic that most firms eventually confront. The dominant consumer email platforms are provided by advertising businesses. Their free tiers exist because the contents and metadata of messages, who writes to whom, about what, when, are analysable raw material for profiling and ad targeting.
For an individual, that trade-off is debatable. For a business, it’s indefensible. Consider what flows through a typical firm’s mail: contract negotiations, pricing strategies, client lists, salary discussions, merger interest, HR grievances, the personal data of staff and customers that UK GDPR obliges you to safeguard. Handing the analysis of that material to an advertising company, even passively, even “anonymised”, sits awkwardly with the duties a British company owes its clients and employees. Increasingly, it also sits awkwardly with regulators, auditors, and the corporate clients who now ask about it directly.
The alternative that’s gathered momentum is business email built on end-to-end encryption, typically hosted in Europe, priced in pounds rather than paid in data. The principle is straightforward: messages between users of the service are unreadable to the provider itself. No scanning, no profiling, no data brokerage. Your contract correspondence stays between you and your counterparty, where contract correspondence belongs.
More than a mailbox
Beyond the privacy question, firms upgrading from ad-hoc arrangements discover what a proper business mail system actually offers, because most were never using one:
- Your own domain. Addresses like accounts@yourfirm.co.uk and sam@yourfirm.co.uk carry credibility that consumer addresses can’t match, with clients, suppliers, banks, and Companies House correspondence alike.
- Shared calendars and address books. Coordination that consumer accounts make clumsy becomes native: diaries across the team, meeting rooms, availability at a glance.
- Aliases and catch-alls. Sales@, support@, and info@ route to the right people; one-off addresses for marketing campaigns and supplier sign-ups make breaches and spam traceable to the source.
- Archival and export. In a dispute, a tribunal, or an information request, your email history is evidence. A proper system keeps it organised, searchable, and retrievable.
There’s also the resilience angle, which British firms of every size have learned the hard way. If your email lives on a borrowed consumer account, a billing hiccup, a mistaken fraud flag, or an algorithmic suspension can lock you out of your own business correspondence, with no phone number to ring and no SLA to invoke. Email on infrastructure you control, under a business arrangement with contractual obligations, doesn’t vanish overnight.
Making the move without disrupting the office
The migration worries people more than it should. Done sensibly, it’s a fortnight of background work:
- Choose the domain most firms already own one for their website.
- Plan the address structure before creating anything: departments, functions, individuals, aliases. A whiteboard and half an hour.
- Migrate the critical integrations first: Companies House, HMRC, banking, insurers, key clients, and any system that sends password resets.
- Run both systems in parallel for a full billing cycle, forwarding the legacy inbox, so nothing material is missed.
- Brief the team properly new signatures, new conventions, and a short note to regular correspondents announcing the change.
- Retire the old accounts deliberately with the archive exported and backed up first, not deleted.
The direction of travel
None of this is techno-optimism; it’s simply where expectations are heading. British commerce has absorbed the lesson that data handling is a competitive and regulatory matter, and email is the largest repository of business data most firms possess. The ones treating it as infrastructure, owned, encrypted, organised, European-hosted, are finding it costs little more than the borrowed alternative and buys considerably more.
Free email was never free. For British businesses, the bill is simply arriving in a currency that finally has their attention, and the exit is easier than it’s ever been.
