A. In a bucket on Cloud Storage that is accessible only by an AppEngine service that collects user
information and logs the access before providing a link to the bucket.

B. In Cloud SQL, with separate database user names to each user. The Cloud SQL Admin activity logs
will be used to provide the auditability.

C. Encrypted on Cloud Storage with user-supplied encryption keys. A separate decryption key will be
given to each authorized user.

D. In a BigQuery dataset that is viewable only by authorized personnel, with the Data Access log used to
provide the auditability.