Proposed due diligence requirements for U.S. infrastructure as a service providers may lead to increased compliance expectations.