There are companies who are pulling in the rein with regard to placement of sensitive data. That is, going cloud-less (or more accurately, privately-owned public cloud, and more often, private cloud)

SOC 2, HIPAA, and ISO 27001 and various military guidelines are a few reason why.