In the shared responsibility model, the cloud provider is responsible for the security of the cloud (infrastructure, hardware, data centers), while the customer is responsible for security in the cloud, which includes securing their applications, data, and configurations.