Cloud, SaaS, and Data Ownership

More public-safety software now runs in the cloud and is purchased as a subscription. Learn what that actually means, what your vendor is responsible for, and why access to your own data matters.

Full guide planned · 14 min read

The short version

Many modern public-safety systems are no longer installed on a server sitting inside city hall. Applications and data may be hosted by a vendor or cloud provider and reached through the internet. Cloud computing means those resources are delivered over shared, network-accessible infrastructure rather than hardware you operate; SaaS means the software is hosted and maintained by the provider and bought as a subscription; on-premises means it runs on equipment you manage. This can improve scalability, availability, updates and access — but it changes how you should think about two different things: who legally owns the information, and whether you can actually retrieve, export and use it in a practical format.

Start here

If you read one thing on this subject, read this.

Official resourceNIST

The NIST Definition of Cloud Computing (SP 800-145)

Three pages that define cloud computing precisely, including the service and deployment models.

Why it matters

When a proposal says “cloud,” this tells you which of several quite different arrangements is being described.

Go deeper

Hub guidePublic Safety Technology Hub

Cybersecurity for Fire & EMS Leaders

Continue learning: hosting your systems somewhere else changes your exposure, and that has its own track.

Why it matters

Cloud and cybersecurity questions arrive together in a procurement, but they are different conversations.

Questions to ask your vendor

  1. Who owns our data?
  2. Where is it stored?
  3. How do we export it?
  4. What format do we receive?
  5. Is an API available?
  6. How is the system backed up?
  7. How long are backups retained?
  8. What happens during an internet outage?
  9. What happens during a vendor outage?
  10. What happens if we terminate the contract?
  11. How long can we access our historical records?
  12. What does it cost to retrieve or migrate our data?

This is a reading list, not a guide

Everything above was published by someone else, and is here because it is the clearest treatment of the subject we could find and verify. The Hub’s own guide to this topic is still being written. If you know a better source than the ones listed, that is worth telling us before it is.

Send a note