Deciding on a Secure Info Repository