A cloud environment is provided generally having at least one private data center possessing a controller/routing system and nonvolatile mass storage, a plurality of data objects retained in the nonvolatile mass storage, and a public cloud storage service provider linked to the controller/routing system. The public cloud storage service provider possessing a database containing policy decisions and metadata of the plurality of data objects. The private data center is not in possession of the policy decisions and the metadata for the plurality of data objects, rather the public cloud storage service provider is. The private data center in possession of the plurality of data objects, whereas the public cloud storage provider is not. The public cloud storage service provider adapted to be communicatively linked to an end-user computing system by way of the controller/routing system. The data center is independent of the public cloud storage provider.