If you need to guarantee privacy then your best bet is two separate devices. Mail delivered via BIS, web browsing that doesn't take place on the Blackberry Browser, and PIN messages all don't travel via company servers. However, as the
CIBC case has demonstrated, CIBC was able to retrieve PIN messages from their employee's handhelds...