In the wake of the NSA revelations, our tech team has been busy changing the way our internal email works - automatically encrypting any email that is stored on our servers with PGP encryption. Even if an unencrypted email is sent to us, it is encrypted and stored as soon as it is delivered to our server - only decryptable by the person the email was sent to. Even if the server is seized or otherwise compromised, the actual data on it will be illegible, protecting both us and our email host.  This is accomplished by the server storing all of our public keys to encrypt the emails, so that not even the sysadmin can read them.

After we've done some extensive testing and security auditing, we'll release documentation and instructions to help others set this up themselves.