How to ensure compliance with private cloud providers in regulated sectors

The compliance question isn't "are we using a private cloud?" Rather, it’s "does our private cloud actually do what compliance requires?"