A cloud-based service platform comprising: a network connection; a working memory device; a persistent data storage medium; one or more processors coupled to the working memory device, the network connection and the persistent data storage medium, the persistent data storage medium containing instructions that, when executed on the cloud-based service platform, cause the cloud-based service platform to perform operations including: receiving, over the network connection, a document as part of a request from a first user of the cloud-based service platform; maintaining the document within the working memory device, without writing the document to the persistent data storage medium; transmitting, over the network connection, the document to a security service provider for persistent storage; deleting any copies of the document from the working memory device after storage by the security service provider; receiving a request to access and review the document; receiving in response to the request, over the network connection the document from the security service provider; in response to receiving the document, maintaining the document within the working memory device, without writing the document to the persistent data storage medium; performing changes to the document in response to the request; and upon completion of the changes to the document, transmitting, over the network connection, the document to the security service provider for persistent storage and deleting the document from the working memory device; wherein the receiving the document as part of a request includes: accessing a policy associated with the first user; evaluating the request and the document against the policy; and determining whether to persistently store the document with the security service provider based on results of evaluating the request and document; and wherein, upon completion of the changes to the document, the transmission of the document to the security service provider is dependent upon consulting the policy. a network connection; a working memory device; a persistent data storage medium; one or more processors coupled to the working memory device, the network connection and the persistent data storage medium, the persistent data storage medium containing instructions that, when executed on the cloud-based service platform, cause the cloud-based service platform to perform operations including: receiving, over the network connection, a document as part of a request from a first user of the cloud-based service platform; maintaining the document within the working memory device, without writing the document to the persistent data storage medium; transmitting, over the network connection, the document to a security service provider for persistent storage; deleting any copies of the document from the working memory device after storage by the security service provider; receiving a request to access and review the document; receiving in response to the request, over the network connection the document from the security service provider; in response to receiving the document, maintaining the document within the working memory device, without writing the document to the persistent data storage medium; performing changes to the document in response to the request; and upon completion of the changes to the document, transmitting, over the network connection, the document to the security service provider for persistent storage and deleting the document from the working memory device; receiving, over the network connection, a document as part of a request from a first user of the cloud-based service platform; maintaining the document within the working memory device, without writing the document to the persistent data storage medium; transmitting, over the network connection, the document to a security service provider for persistent storage; deleting any copies of the document from the working memory device after storage by the security service provider; receiving a request to access and review the document; receiving in response to the request, over the network connection the document from the security service provider; in response to receiving the document, maintaining the document within the working memory device, without writing the document to the persistent data storage medium; performing changes to the document in response to the request; and upon completion of the changes to the document, transmitting, over the network connection, the document to the security service provider for persistent storage and deleting the document from the working memory device; wherein the receiving the document as part of a request includes: accessing a policy associated with the first user; evaluating the request and the document against the policy; and determining whether to persistently store the document with the security service provider based on results of evaluating the request and document; and accessing a policy associated with the first user; evaluating the request and the document against the policy; and determining whether to persistently store the document with the security service provider based on results of evaluating the request and document; and wherein, upon completion of the changes to the document, the transmission of the document to the security service provider is dependent upon consulting the policy.