If a company is intent on constraining access to data from its office space only, then it wouldn't select or open itself to such systems.