Systems and methods for cloud data security

A method for protecting data-at-rest in a cloud-based service platform, the method comprising:

• on a computing system within the cloud-based document management service platform performing operations including:
• performing, using the one or more processors, a first action involving a document stored in the working memory device;
• upon following completion of the a first action involving a document stored in a working memory device, transmitting, over the network connection, the document to a remote system operated by a security service provider for persistent storage, wherein prior to the transmitting, the document being retained within the working memory device and is not written to the persistent data storage medium;
• deleting the document from the working memory device in response to receiving a confirmation of receipt of the document from the remote systemoperated by the security service provider;
• determining, after deleting the document, that a second action requires access to involves the document;
• receiving in response to a request, over the network connection using the one or more processors, the document from the remote systemoperated by the security service provider;
• in response to receiving the document, maintaining the document within the working memory device, without writing the document to the persistent data storage medium;
• performing, using the one or more processors, the second action involving the document;
• and
• upon completion of the second actioninvolving the document, deleting the document from the working memory device.

A non-transitory computer-readable storage medium containing instructions that, when executed on a computer system within a cloud-based service platform, cause the computer system to perform operations including:

• performing, using the one or more processors, a first action involving a document stored in the working memory device;
• upon following completion of the a first action involving a document stored in a working memory device, transmitting, over the network connection, the document to a remote system operated by a security service provider for persistent storage, wherein prior to the transmitting, the document being retained within the working memory device and is not written to the persistent data storage medium;
• deleting the document from the working memory device in response to receiving a confirmation of receipt of the document from the remote systemoperated by the security service provider;
• determining, after deleting the document, that a second action requires access to involves the document;
• receivingin response to a request, over the network connection using the one or more processors, the document from the remote systemoperated by the security service provider;
• in response to receiving the document, maintaining the document within the working memory device, without writing the document to the persistent data storage medium;
• performing, using the one or more processors, the second action involving the document;
• and
• upon completion of the second actioninvolving the document, deleting the document from the working memory device.