Ask HN: Secure Cloud Storage for Sensitive Customer Data

Any experience on storing data via the cloud for sensitive customer information? We are exploring if we can (from a legal stand point) keep this data in the cloud, but if so we'd like a service that (in this order of importance): - Is the most secure (difficult to judge, but maybe by looking at history of vulnerabilities, encryption practices etc...) - Is shareable with-in company users but logs user access data (e.g. when data was access, what data was accessed, etc...) - Limit's the storing entity's liability in case of a hack/vulnerability (not sure anyone does this) - Has admin support to turn control access (e.g. no one can access files between midnight and 5am). - Has excellent uptime and support. Does not need to be PCI compliant, but more along the lines of HIPPA. I see Box is compliant, any other major players? Any personal experience?