SaaS Application Data Protection Is Your Responsibility
SaaS vendors own the cloud infrastructure stack and all primary components that make up the service such as physical infrastructure, network controls, the operating system that hosts the application, controls for the application offered as a service, hardware components, and more.
—the critical component that powers your business and is central to the service’s relevance—is
your organization’s responsibility
This is because SaaS vendors operate on a
shared responsibility model
, which means obligations are shared between the vendor and the customer.