I am doing some investigation on hosting sensitive data. Mostly finance and fund data but at a personal level. This will be a secure website where users will be able to login and view their fund data. Backups are needed but source data will reside in offline database and will be transfered to this site on a monthly/quarterly basis (not sure at the moment how). Credit card data storage is not required at this time.
I'm trying to figure out what I need to look for when selecting a host from physical security to data security. What are some considerations to take into account when looking for a host? SAS 70? Any others?