Comment by orev

The only companies directly dealing with that type of stuff are the ones already at such a scale where they need to actually build their own data centers. Everyone else is just renting space somewhere that already takes care of those things and you just need to review their ISO/SOC reports.

This kind of argument comes from the cloud provider marketing playbook, not reality.