1. A system, comprising: a first data storage service comprising a plurality of data storage devices and a first web service interface configured to receive web service requests transmitted to the first web service interface, the first data storage service being configured to process the web service requests transmitted to the first web service interface using the plurality of data storage devices; and a second data storage service, where first data storage service is implemented with computing resources in a first set of one or more facilities operated by a computing resource service provider and the second data storage service is implemented with computing resources in a second set of one or more facilities that is geographically distinct from the first set of one or more facilities and operated by the computing resource service provider and the first data storage service is configured in accordance with a first set of regulations associated with a first legal jurisdiction and the second data storage service is configured in accordance with a second set of regulations that is different from the first set of regulations and associated with a second legal jurisdiction, the second data storage service comprising a second web service interface, the second data storage service configured to operate as a proxy to the first data storage service by at least: receiving, at the second web service interface, a request from a requestor to store data, the request originating from a network not operated by the service provider; encrypting the data using a cryptographic key inaccessible to the first data storage service; transmitting the encrypted data to the first data storage service for persistent storage on behalf of the requestor; and maintaining access to the cryptographic key while preventing access to the cryptographic key by the first data storage service.