While there are several factors in deciding to commission custom software versus buying off the shelf, one area that requires extra care and discussion while setting up a project is the set of choices around handling personally identifiable information (PII). In case you're skeptical, recall that Target suffered a massive breach in 2013, resulting in damages costing $252 million, before the 140 filed lawsuits against the corporation.