Abstract: A cloud-based storage architecture provides for the isolation of client data in a distributed manner using a hub-and-spoke account mechanism within the cloud. Individual client data is securely isolated while still providing a master account with access to all data, including providing access from common applications to all of the data. Thus complete client isolation is achieved while simultaneously sharing the code necessary to process the data in the cloud. A separate client account may be maintained for data stored at separate physical locations, such as may be required under various privacy laws and regulations; in this manner, no data is required to leave a specified geopolitical location in order for processing to occur.

Abstract: A cloud computing architecture for managing data privacy includes multiple cloud cores for the segregation of data sets. The data sets may be segregated by, for example, client or line of business. Identified and de-identified data is segregated and provided different access authorizations through a corresponding compute cluster. Each core may be managed through a separate cloud account. Cores corresponding to data collected in different regions are physically hosted in the corresponding regions, such that the architecture cloud cores are at known physical locations rather than anonymously hosted. Likewise, applications specific to a region and used for processing of data in that region are physically hosted in that region in conjunction with the corresponding data.

Abstract: A cloud-based storage architecture provides for the isolation of client data in a distributed manner using a hub-and-spoke account mechanism within the cloud. Individual client data is securely isolated while still providing a master account with access to all data, including providing access from common applications to all of the data. Thus complete client isolation is achieved while simultaneously sharing the code necessary to process the data in the cloud. A separate client account may be maintained for data stored at separate physical locations, such as may be required under various privacy laws and regulations; in this manner, no data is required to leave a specified geopolitical location in order for processing to occur.