 One option is to use a private cloud instead of a public cloud (there are as well providers that offer private cloud storage).Another option is to ingest data in encrypted format where the key is hold within your on premise infrastructure.Access is often by use of cloud storage gateways that are on premise.