I'm more SaaS than IaaS, but yes that is also true.

To be honest though, we have a very strong heritage of protecting peoples data in the EU and have strong regulatory and legal controls around it too. We wouldn't let a government agency take data without the proper permission, as would be the case on site. I don't see any difference.

Justin