So, you're worried about this
> I now need to have a long conversation with legal. How will the service provider handle the content (discussions, screenshots, code snippets) that my team will upload?
Yet you suggest using email where it basically goes (or can be coerced to go) across the internet in plain-text where anyone can read it?