EHR Healthcare, a provider of electronic health record software, is migrating to Google Cloud and needs to pass an upcoming privacy compliance audit. You are responsible for ensuring compliance. What should you do? (Choose two.)