Where On Earth Is Cloud Data Actually Stored?

Think of cloud computing and the first thing that comes to mind is usually a mainstream application like Google Drive, Dropbox or iCloud, but there is a lot more to it than you might think.

Firstly, we need to understand what cloud computing actually is. In a nutshell, cloud computing is all about storing and retrieving your personal (or corporate) data from your own little area on the Internet. Nothing is stored on your local hard drive and it is accessible from any location, any device and at any time.

If that all sounds a little far-fetched, think about an email service you are already using e.g. Gmail, Yahoo, Hotmail etc. None of those emails you send and receive are actually taking up space on your local hard drive, they are stored on the email providers’ servers: this is a form of cloud computing. To take this example further, remember that you can log in and access your emails from any pc, any laptop, and any smartphone. This is only made possible by the cloud. 

However, many people don’t realise that despite being held in the “cloud”, your data still needs to be physically stored on a device somewhere. 

Whether this is on flash or traditional hard drive storage, companies offering this service still need to have huge servers dedicated to storing your data. These places are often called “server farms” and are essentially vast warehouses filled with servers which are running 24/7/365.

This raises a number of questions: where is my data actually stored? Who has access to my data and is my data safe?

In terms of where your data is stored, it is fairly safe to say that you will never truly know unless you do some digging. The provider may be based in the US (for example), but their servers might be in China, or the UK, or anywhere else in the world. 

Many companies outsource their server farms to satellite locations in order to reduce costs. So it is very difficult to know where your data actually resides, and the cloud provider may not necessarily disclose this.

Who has access to your data is another point to consider. Reputable companies have tried and tested security systems to ensure that only you have access to your data. There are faceless companies out there offering the same amount of storage and functionality, whether you choose to trust them or not, is an important decision. In addition, you should also find out about the safeguards which are in place to keep your data secure and always accessible. Most reputable cloud storage providers will replicate your data several times on different servers to ensure that in the event of a catastrophe, your files are safe. 

This is not to say that your data will ever be 100% safe: natural disasters, fires and malicious damage (for example) are all events which can be planned for, but not necessarily avoided.

The vital point to remember is that although your data is not physically stored on your local hard drive, it is still stored somewhere, and with this in mind it may still be susceptible to the same failures and problems as the hard drive in your laptop or pc. 

Server farms are not invincible; storage media can fail, large corporations can get hacked, and data can get deleted just as easily on a server as it can on your computer, so be wary of storing all of your important and confidential files in the cloud.

OnTrack:

You Might Also Read:

Blockchain Improves Multicloud Network Management:

« NASA’s Poor Cybersecurity Is An Operational Threat
"Cookie Walls" Non-Compliant With GDPR »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Freshfields Bruckhaus Deringer

Freshfields Bruckhaus Deringer

Freshfields Bruckhaus Deringer is a global law firm with a track record of successfully supporting the world's leading corporations, financial institutions and governments.

CERT.br

CERT.br

The Brazilian national Computer Emergency Response Team

LogicManager

LogicManager

LogicManager offer a complete set of IT governance, risk and compliance software solutions and advisory services.

CERT.LV

CERT.LV

CERT.LV is the national Computer Emergency Response Team for Latvia.

itWatch

itWatch

itWatch is focused on data loss prevention (DLP), endpoint security, mobile security, encryption, and cost reducing solutions for IT operations.

ComTrue Technologies

ComTrue Technologies

ComTrue Technologies provides artificial intelligence solutions and information security solutions.

Open Cloud Factory

Open Cloud Factory

Open Cloud Factory is a European based security company, that strives to ease the pressure on IT managers, by providing tools to implement your Security Strategy in an effective and easy manner.

HCC Embedded

HCC Embedded

HCC’s mission is to ensure that data stored or communicated by an embedded IoT application is secure, safe and reliable.

Rigado

Rigado

Rigado's mission is to enable commercial IoT success by providing high-performance secure and scalable wireless edge connectivity and network infrastructure.

CloudVector

CloudVector

CloudVector's API Detection & Response platform is the only API Threat Protection solution that goes beyond the gateway to provide Shadow API Prevention and Deep API Risk Monitoring and Remediation.

Industrial Control System Information Sharing and Analysis Center (ICS-ISAC)

Industrial Control System Information Sharing and Analysis Center (ICS-ISAC)

ICS-ISAC is a non-profit, public/private Knowledge Sharing Center established to help facilities develop situational awareness in support of local, national and international security.

usecure

usecure

usecure is a global provider of computer-based cyber security awareness training, offering the market’s most time-efficient, cost-effective and admin-lite solution for reducing insider threats.

CERT.JE

CERT.JE

CERT.JE is responsible for promoting and improving the cyber resilience across the critical national infrastructure, business communities and citizens in Jersey.

Gradient Cyber

Gradient Cyber

Gradient Cyber is a trusted cybersecurity partner specializing in small businesses and mid-market enterprises concerned about cybersecurity but lacking the staff to give it the attention it deserves.

Kubus Hitam

Kubus Hitam

Kubus Hitam are a research-based company focused on cyber security. we strongly believe that innovation and safety are the two keywords for the future business market.

ProjectDiscovery

ProjectDiscovery

ProjectDiscovery is an open-source, cybersecurity company that builds a range of software for security engineers and developers.