Chapter 3: Introduction to Technological Aspects of Privacy
Cloud Computing: SaaS, PaaS and IaaS
Cloud computing is on-demand availability of computing resources, replacing on-premises computing. The three models - Software as a service (SaaS), Platform as a service (PaaS) and Infrastructure as a service (IaaS) - differ in how much the customer controls, which matters for privacy responsibility.
Cloud computing has drawn organizations away from on-premises computing for cost savings, scalability without capital investment, and remote access. There can be security and privacy advantages: cloud architectures are homogeneous and easier to manage, and providers can dedicate specialist staff that smaller organizations cannot hire.
| Model | What it delivers | Customer control |
|---|---|---|
| Software as a service (SaaS) | Vendor-managed applications over the internet, often in a browser | Lowest - vendor manages the application |
| Platform as a service (PaaS) | A framework/components for developers to build applications | Medium - customer builds on the platform |
| Infrastructure as a service (IaaS) | Self-service compute, networking, and storage | Highest - customer manages databases of personal information |
Key terms - quick answers
What is “Cloud computing”?
On-demand availability of computing resources, offering cost savings, scalability, and remote access compared to on-premises systems.
What is “On-premises computing”?
Computing on resources owned and managed by the organization itself.
What is “Software as a service (SaaS)”?
Delivery of vendor-managed applications over the internet, often run directly in a browser with no client-side installation.
What is “Platform as a service (PaaS)”?
A cloud framework providing components for developers to build and use to create customized applications.