A healthcare organization is evaluating Google Cloud but is concerned about being able to independently verify that Google's cloud services actually meet the specific regulatory requirements (such as HIPAA) their industry demands. They want objective, independent assurance rather than relying solely on Google's own claims. Which Google Cloud trust and transparency capability best addresses this concern?