I don't know of a specific rule that prevents shared hosting - and if you do, I'd love to see it (as I mentioned, by company is in the middle of a similar proce

I don't know of a specific rule that prevents shared hosting - and if you do, I'd love to see it (as I mentioned, by company is in the middle of a similar process). What is clear is that you have to document access and changes, which could be trickier in a shared hosting environment. But if the host itself has processes in place, and documents them to you, you should be fine.