Most Desktop As A Service providers store their virtual hard drives and the VMs RAM in a way that allows them to access their contents.
Choosing a provider who offers a 'no-knowledge of server' option looks like the easiest solution. However, companies rarely choose those, and there are significant financial considerations when changing a cloud provider after you've initially chosen one.
What would be the theoretical steps to securing encryption keys and their associated databases?(encrypting things like basics OS programs is not required).
What would be the steps to encrypt the whole filesystem and RAM (since data can stolen if accessed while in RAM) if encrypting only the sensitive data turns out to be more expensive?