Cloud computing is the practice of using computing resources, such as servers, storage, databases and software, delivered over the internet on demand, so that individuals and organisations can rent what they need instead of buying and maintaining their own hardware.
The word cloud can make the idea sound vague, but it is quite concrete. Somewhere, in large buildings called data centres, sit vast numbers of powerful computers. Cloud computing is the arrangement that lets you use a slice of that capacity over the internet, paying for what you use, rather than owning the machines yourself. When you check web-based email or stream a film, you are already relying on it.
How does cloud computing work?
The widely cited definition from the United States National Institute of Standards and Technology captures the essence: cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort. In plainer terms, you can spin up computing power quickly when you need it and let it go when you do not, without buying equipment or waiting for it to be installed.
A key enabling technology is virtualisation, which lets one physical computer be divided into many virtual machines that can be created, resized and shut down through software. This is what makes the cloud so flexible: providers pool enormous resources and share them efficiently among many customers, each of whom sees only the portion they use. To follow how these systems shape everyday technology, our technology section tracks the developments in accessible terms.
What are the main types of cloud service?
Cloud services are usually grouped into three models, distinguished by how much the provider manages and how much you do. NIST identifies these as infrastructure as a service, platform as a service, and software as a service.
| Model | What you get | Everyday analogy |
|---|---|---|
| IaaS (Infrastructure as a Service) | Raw building blocks: virtual servers, storage and networking you configure yourself | Renting an empty kitchen and cooking from scratch |
| PaaS (Platform as a Service) | A ready-made environment with tools to build and run applications | A kitchen stocked with ingredients and equipment |
| SaaS (Software as a Service) | Finished software you simply use through a browser or app | Ordering a prepared meal |
Most people interact daily with SaaS, such as web-based email, online document editors and photo storage, without ever thinking about the servers behind them. Developers and businesses more often use PaaS to build applications, and IaaS when they want fine control over the underlying infrastructure.
What are the deployment models?
Beyond the service models, NIST describes different ways the cloud can be deployed. A public cloud is run by a provider and shared among many customers over the internet. A private cloud is dedicated to a single organisation, offering more control at higher cost. A hybrid cloud combines the two, letting an organisation keep sensitive workloads private while using public resources for others, and a community cloud is shared by organisations with common needs. The right choice depends on priorities such as cost, control and regulatory requirements.
Why has cloud computing become so popular?
Several practical advantages explain the shift. The first is cost structure: instead of large upfront spending on hardware that may sit idle, organisations pay for what they use, turning capital costs into ongoing operating costs. The second is scalability. If demand suddenly spikes, cloud resources can expand quickly, then shrink again when things quieten down, which is difficult with owned equipment. The third is accessibility, since cloud services can be reached from anywhere with an internet connection, supporting remote work and collaboration. Providers also handle much of the maintenance, updates and physical security of the underlying systems, freeing customers to focus on their own applications rather than on keeping servers running.
Speed of experimentation is another draw. Because resources can be created in minutes rather than ordered and installed over weeks, a small team can test an idea, scale it if it works, and discard it cheaply if it does not. This lower barrier to entry has helped startups compete with far larger organisations, and it is one reason so much modern software is built cloud-first. For established businesses, the same flexibility supports handling seasonal peaks, such as a retailer’s busy shopping period, without paying year-round for capacity that sits idle the rest of the time.
These same qualities have helped power other major trends. Modern artificial intelligence, for instance, leans heavily on the vast, flexible computing capacity that the cloud provides, a link explored in our look at what generative AI can and cannot do.
What are the trade-offs and risks?
Cloud computing is not without drawbacks, and a balanced view matters. Because services run over the internet, an outage at the provider or a problem with your own connection can cut off access to important tools and data. Costs, while flexible, can accumulate and sometimes surprise organisations that do not monitor their usage. Storing data with a third party also means less direct control and raises questions about privacy, jurisdiction and compliance, especially where data is held in another country.
Security in particular deserves a clear-eyed view. Major providers invest heavily in protecting their infrastructure, often exceeding what a small organisation could achieve alone. Yet responsibility is shared: the provider secures the underlying systems, while customers remain responsible for how they configure access, manage passwords and control who can see their data. Many high-profile incidents stem from misconfiguration rather than a flaw in the cloud itself. Understanding this division of responsibility is one of the most important parts of using the cloud wisely, and it sits alongside the broader online-safety themes we cover in our internet section.
Frequently asked questions
Where is my data when it is in the cloud?
It is stored on physical servers in data centres owned or rented by a cloud provider, often in more than one location for reliability. The cloud is not an abstract place; it is real hardware you access over the internet rather than keep yourself.
Is the cloud safe for my data?
Reputable providers invest heavily in security and redundancy, often beyond what individuals or small organisations could manage alone. However, responsibility is shared: how you configure access, set passwords and manage permissions strongly affects how safe your data actually is.
What is the difference between IaaS, PaaS and SaaS?
They describe how much the provider manages for you. IaaS supplies raw infrastructure like virtual servers and storage, PaaS adds a ready platform for building and running applications, and SaaS delivers finished software you simply use, such as web-based email.
Do I already use cloud computing?
Almost certainly. Web-based email, online document tools, photo backup, streaming services and file-syncing apps are all forms of cloud computing. If you use software or storage through the internet rather than installed only on your own device, you are using the cloud.
What are the downsides of the cloud?
Cloud services depend on an internet connection, so an outage at the provider or in your connection can interrupt access. Ongoing costs, less direct control over your data, and the effort of moving between providers are other trade-offs worth weighing.
