Of course, I wouldn't ask this for a home project but if its considered for a business archival solution were government regulation requires me to store things

Of course, I wouldn't ask this for a home project but if its considered for a business archival solution were government regulation requires me to store things for multiple years and client data for same period. Of course, I will make sure this data is safe. I am not going to depend on their marketing pages. You make it sounds this is ridiculous to do a security assessment or to ask for such paperwork. I can tell you that my company insurance even demands it. At the moment I prefer to pay 3x more and store things at a cloud provider which shares these kind of documentation.