A national healthcare agency must deploy a new patient-records platform. Regulations require that all infrastructure be dedicated to the agency, that no other tenants share the underlying physical hosts, and that the agency retains full governance over the physical location and configuration of resources. The agency still wants cloud characteristics such as self-service provisioning and elasticity for its internal departments. Which deployment model best satisfies these requirements?