Most arbitration organizations run on email, undermining their most important obligation: confidentiality. This article explores the operational, ethical, and security risks created by email-based workflows, including misdirected communications, uncontrolled document access, and compromised accounts. It also outlines what a more secure, access-controlled approach to arbitration case management looks like for modern ADR organizations.