You could still do this with Concord too! Run your own company relay, AUTH whitelist npubs (team), and run a team Concord chat on that relay, you'd be better protected as a company, if your relay is compromised, your chats are still not, on-prem is further secured with Concord.