A consortium of five regional hospitals wants to share a common infrastructure to run electronic health record applications. They require that the environment be governed by a shared set of HIPAA-aligned security and compliance policies, and that access be restricted only to the member organizations rather than the general public. Which cloud deployment model best fits these requirements?