content: This is true at the moment. My guess is US companies are going to start documenting very, very carefully everything related to where exactly each customer's data is stored both for active data in use and static backups. If they don't, they risk having to respond to security letters and court orders. Since segmentation is already a core cloud security concept, it will also be leveraged by the legal departments of cloud service providers. All in all this is a good direction for the industry.