But if you’re building a SaaS application where customer data is private to the customer, then you have a dilemma. None of the big cloud providers help you to sandbox data between your customers without standing up dedicated infrastructure (databases, queues, etc.) for each customer.
So it’s up to your application to create a permissions layer and to implement strategies to ensure that you never deliver Customer A’s data to Customer B. That's harder than it sounds, which is why we need to talk about application-layer encryption.
Read my latest blog for a deep-dive on how SaaS businesses can use application-layer encryption to encrypt data before it's stored.