(2) sounds like a great idea if you can ensure private company data never reaches your servers, with features like remote controlling agents from a central place