I recently had the opportunity to look at Snowflakes security model. This is what I think.

http://www.snowflake.net/blog/data-safe-cloud