What considerations would you take into account when architecting a cloud-based application for sensitive data?