If a company were serious about IT security and confidentiality, these should be provided, on and off-site. Otherwise don't blame me if you got hacked and information is everywhere online!