Security, data residency and regulations