SaaS vendors operate on a shared responsibility model, which means obligations are shared between the vendor and the customer, on aspects relating to security & others. SaaS vendors own the cloud infrastructure stack and all primary components that make up the service such as, physical infra, network controls, operating system that hosts the application, controls for the application offered as a service, hardware components and others. However, ‘data’, the critical component that powers the business and central to the service’s relevance is the organisations responsibility.