There is provided a method of securely processing data in a third-party cloud environment, and a secure portion of a third-party cloud environment configured to perform the method. The method comprises providing, from a user to the third-party cloud environment, computer executable code configured to process protected data input into the third-party cloud environment, and storing the computer executable code in a secure portion of the third-party cloud environment which is under the control of a secure provider; providing, from the secure provider to the third-party cloud environment, protected data and storing the protected data within the secure portion; executing, in the secure portion of the third-party cloud environment, the computer executable code so as to process the protected data solely within the secure portion of the third-party cloud environment and generate output data; and restricting, via the secure portion, the user from retrieving output data from the secure portion of the third-party cloud environment.