How do you ensure that cloud storage buckets containing sensitive client data remain private and compliant at Berkeley Research Group?