an organization is working on their gdpr compliance strategy. it wants to ensure that controls are in place to ensure that personally identifiable information (pii) is stored in cloud storage buckets without third-party exposure. which cloud solution should the organization use to verify that pii is stored in the correct place without exposing pii internally?