I would be hesitant to put both companies data on one server. If anything happens to the one server [seizure, hardware failure, etc.] both companies are non-working. I would also suggest at least a standard version of the server OS. That way you can use Hyper-V for VMs to separate the server roles; and don't forget about backups.
