Organizations are increasingly coming to rely on software as a service, replacing applications that have previously been hosted on-premises. In April, Gartner predicted that SaaS global revenue would grow to $143.7 billion by 2022. There are many benefits to a SaaS approach – lower costs, no on-premises equipment or software to operate, no updates or patches to manage. But who owns the data? Who has responsibility for compliance? And what questions should customers ask a potential SaaS vendor to determine whether their data will be compliant in their service?