Best security questions to ask about SaaS

all stored on one huge database out there? How is data separated? How will the legal question of e-discovery be addressed should it arise as a business concern? - Is the data flowing between the business and the vendor's cloud-computing infrastructure...