But it's just levels different to Google.

I have a small startup at hetzner.

But my main job has everything at the big cloud providers because of audit logs, high slash, global network etc. And no the hetzner video shows already that hetzner can't fullfil all required security certifications.

They have rows and rows of desktop PCs there.

With 'really' care I mean if you process millions or billions you just don't go to hetzner.

And doing encryption on rest with what decryption method? Manual unlock through a remote console?

At Google you literally have encryption on rest by default with key rotation build in and you can use your own keys.

Dimensions of difference