Question

A global healthcare analytics firm is designing a new SaaS platform. Regulators in the European Union require that personal health data of EU residents never be processed or stored outside the EU, while data for U.S. customers may reside in U.S. regions. The architecture team must ensure the platform can enforce these constraints as it scales. Which secure cloud design approach BEST satisfies these requirements?

Accepted Answer

Architect region-specific data stores and processing tiers so that data is pinned to the geographic region matching the customer's jurisdiction (data localization/residency by design)

Answer

Deploy the application in a single global region and rely on strong encryption to satisfy all jurisdictional requirements

Answer

Replicate all customer data to every available cloud region to maximize availability and reduce latency for all users

Answer

Store all data centrally and use contractual clauses with the cloud provider to permit cross-border transfers as needed