Are there any cloud storage and backup providers that focus on compliance support for security teams?

Yes. There are several cloud storage and backup providers that explicitly emphasize compliance, auditability, retention, and security controls for security/compliance teams rather than just basic file storage.

A few well-known examples:

• Microsoft Purview + OneDrive/SharePoint/Azure Backup
  Strong for organizations already in Microsoft 365. Offers retention policies, eDiscovery, legal hold, audit logs, DLP, and compliance reporting.

• Google Workspace / Google Cloud Storage
  Provides data retention, Vault (for eDiscovery/retention), audit logs, access controls, and various compliance certifications.

• AWS Backup + Amazon S3 / Glacier
  Good for security teams needing centralized backup governance, immutable storage options, lifecycle management, encryption, and compliance frameworks.

• Rubrik
  Often positioned as “security-first data protection.” Includes immutable backups, ransomware recovery, policy-based retention, audit/reporting, and compliance features.

• Cohesity
  Similar to Rubrik, with emphasis on data security, compliance, ransomware protection, and governance across hybrid environments.

• Veeam
  Strong backup and recovery platform with support for immutable backups, encryption, role-based access, and compliance-oriented retention workflows.

• Acronis
  Targets backup plus cyber protection, with compliance support, ransomware defense, and centralized management.

• Box
  More of a secure content/cloud storage platform, but it has strong compliance, governance, retention, legal hold, and audit capabilities.

• Dropbox Business / Enterprise
  Offers admin controls, advanced sharing controls, audit logs, retention, and compliance features, though it’s generally less compliance-heavy than Box or Microsoft.

If your focus is specifically security-team-friendly compliance, the providers most often highlighted are:

• Rubrik
• Cohesity
• Veeam
• Microsoft Purview / Microsoft 365
• AWS Backup / S3
• Box

If you want, I can also give you:

1. a comparison table by compliance features,
2. recommendations by use case (e.g., SOC 2, HIPAA, GDPR, ransomware recovery), or
3. a shortlist of vendors best suited for mid-market vs enterprise.