Data in use security, accountability of security vendors