Patent ID: 8856300

Claim:
In a cloud computing network hosting a first enterprise application on behalf of a first enterprise and hosting a second enterprise application on behalf of a second enterprise, a method comprising: creating, at a control node of the cloud computing network and by utilizing instructions from memory that are executed by a processor, a first enterprise policy specific to the first enterprise and a second enterprise policy specific to the second enterprise, the first enterprise policy representing security and access policies for the first enterprise and the second enterprise policy representing security and access policies for the second enterprise; enforcing, at the control node, the first enterprise policy to manage communications between a first user device of the first enterprise and the first enterprise application hosted on behalf of the first enterprise, wherein the first user device comprises a thin client device; configuring the thin client device to prevent storage of data associated with the first enterprise application beyond a period of interaction between the thin client device and the first enterprise application; and enforcing, at the control node, the second enterprise policy to manage communications between a second user device of the second enterprise and the second enterprise application hosted on behalf of the second enterprise.