Just to balance out the crowd of self hosting fans, I work with compliance requirements and have no issues with managed services. Sign the right agreements and then it's not my problem to manage auditing and compliance requirements. I'm paying you to make it your problem. Self hosting just makes it my problem.