korkus2000 - 3:43 pm on Jan 19, 2009 (gmt 0)

i know this is off topic but I worked for a company(huge fortune 500) that got hit for lossing private data. I would be concerned about security for this. It sounds like you will be storing or have access to personally identifiable information.

[en.wikipedia.org...]

Items which might be considered PII include, but are not limited to, a person's: * Full name (if not common) * National identification number * Telephone number * Street address * E-mail address * IP address (in some cases) * Vehicle registration plate number * Driver's license number * Face, fingerprints, or handwriting * Credit card numbers * Digital identity

Laws can be different from country to country and I would be sure that you are putting enough resources into locking that down if you have access to personal information. I have seen nonprofits get more info than they should be which can put you in a sticky place if you are housing the server. Just something to think about.