How to do the transition? Do we need some certs? Won't we be on the hook if there is a breach in the company?