What considerations would you take into account when architecting a cloud-based application for a regulated environment?