"Thus far, US ethics commissions have determined that it is ethical for lawyers to use cloud computing, with most concluding that lawyers must take reasonable steps to ensure that their law firm’s confidential data is protected from unauthorized third party access."
"On March 17, 2016, the Legal Cloud Computing association released the first set of cloud security standards crafted specifically for the legal industry at ABA TECHSHOW...." See http://tinyurl.com/cloud-standards, LTG, p. 163
For a list of issues, see p. 213-214 of the 2020 LTG.
"Software as a service (SaaS; pronounced // or //) is a software licensing and delivery model in which software is licensed on a subscription basis and is centrally hosted. It is sometimes referred to as "on-demand software". SaaS is typically accessed by users using a thin client via a web browser." Wikipedia, Software as a Service.
"Providers of IaaS offer computers – physical or (more often) virtual machines – and other resources." Wikipedia, Cloud Computing
"Infrastructure services are fundamental resources that deal with your systems, such as the storage system and the underlying operating system. If you use an infrastructure service like Amazon Web Services or Microsoft's Azure, you use their operating system and resources to run your software. You can use their hardware to run your software and store your files, among other things. Imagine using Microsoft Word without any hardware or operating system software: this is the layer that infrastructure services provide." David Whelan, Practice Law in the Cloud 11 (Canada Law Book 2013) (KF320.A9 W49 2013) (on reserve, Professor Callister)
Things to Know About
Data Center, Wikipedia
What is a private cloud? A lot of the distinction between public and private is not only based on who is sharing resources, but who is responsible for the maintenance of resources. In a private cloud, the customer's IT department has much more responsibility.
Many cloud syncing services provide encryption, but maintain the encryption key themselves. However, there are services like Boxcryptor, Spideroak and Viivo which make further encryption possible or which let the account user retain sole control over the encryption key. Below is a video from Boxcryptor as used with Dropbox.
Essentially, Boxcryptor sets up two directories, one in your dropbox folder, in which items are encrypted, and another as drive X or Z, which is not.
Amazon Web Services S3 provides multiple methods of encryption, including one where you control the key. See http://tinyurl.com/nxnlbmz.