Techniques for identity controlled data centers are provided. Remote processing environments are authenticated via identity associations. Virtual remote processing environments are subsequently installed and authenticated on the remote processing environments on which they are deployed and they receive unique virtual remote processing environment identities, which are locally and independently assigned within their remote processing environments. Applications deployed to the virtual remote processing environments are also authenticated and acquire identities for the virtual remote processing environments in which they are deployed. The processing of the remote virtual processing environments and the applications are circumscribed by independently acquired policies within the remote processing environments.