Legal policy documentation:
AICPA Service Organization Control Reports
Cloud Security Alliance — best practices for providing security assurance within Cloud Computing.
