Yeah. We use google apps, dropbox, unfuddle, GitHub, hipchat, Linode and amazon. Basically, we're pretty comfortable trusting our business with these companies. We're not in a space where we have secrets that really would give someone a competitive advantage. A few things like security credentials are shared offline or in a truecrypt volume.

I mean. If that's truly a concern, it seems like you need to own and configure your own physical hardware and require VPN access to all of them. For us/me, the cost and inconvenience isn't worth it, considering the basically valueless data to an outsider.

That's not to say that everyone decision matrix is the same or should be... As you mention.