Yes, when properly architected. A VDC includes network isolation, network segmentation, encryption at rest and in transit, and access controls. With a provider that maintains recognised information-security and cloud-specific certifications, infrastructure security is managed to international standards.