I worked for a large cloud provider and that is correct, employees did not have access to customer data. The encryption key in this product is split between a S

I worked for a large cloud provider and that is correct, employees did not have access to customer data. The encryption key in this product is split between a SQL database and the front end servers with blob data being stored outside of SQL (customer data). There was no way for a single employee to get access to both portions of the key to decrypt customer data. Using AWS when you're a competitor of Amazon seems like poor business decision making.