ISO 27000 household of standards and is the code of practice for the safety of in my opinion identifiable records (PII) in public clouds acting as PII processors. https://certvalue.com/iso-27018-certification-in-colombia/