A customer in a computing resource service provider environment provisions a virtual machine instance configured with access to sensitive data in a secure storage facility. The virtual machine instance is provisioned specifically to generate reports using a subset of the sensitive data to satisfy different reporting requirements associated with governing entities and agencies. After generating the reports, the virtual machine instance is then removed from the computing resource service environment such that the sensitive data is inaccessible.