The cloud is certainly safe. In the case of Azure, Microsoft tries to comply with as many guidelines as possible such as ISO and NEN. Your specific services must also be secured, of course. If your virtual servers or services are connected to the internet so that others can see them or if staff can directly access the services, then you must secure them against unauthorised use. This is often easier than having them in the office, but it has to be done.