Welcome to...
PaaS and SaaS cloud environmental risk.
Too many professionals don't understand the increased risk, and don't have the experience to know where the data is and how well it's protected.
---then they find out (TOO LATE), the cloud provider has no responsibility or risk acceptance; it's all on them.