What considerations would you take into account when architecting a cloud-based application with compliance requirements?