Your company runs servers in Azure, in an on-premises datacenter, and in a competing public cloud. The compliance team wants to apply and audit the same Azure Policy definitions across all of these servers from a single Azure control plane. Which Azure service should you use to bring the non-Azure servers under this unified governance model?