What combination allows for all customer data in hosted infrastructure with metadata in the EU/US?

The correct answer highlights the importance of a compliant infrastructure setup when dealing with customer data and metadata, especially under regulations such as GDPR. Utilizing a MuleSoft-hosted control plane in the EU or US combined with a customer-hosted runtime plane ensures that all customer data remains in the specified geographic location while leveraging the managed capabilities of MuleSoft's platform.

This combination allows organizations to control their data processing and storage in alignment with local regulatory requirements. The customer-hosted runtime can manage and process data on-premises or within a cloud environment that complies with the required data residency laws. Meanwhile, having the control plane hosted in the EU or US ensures that all administrative and governance functions are compliant with local regulations.

In contrast, other options may not meet the necessary criteria for data residency or regulatory compliance. For example, solely relying on a customer-hosted runtime may not provide the benefits of a managed service in compliance with localized controls, and using CloudHub for both could expose data to non-compliant regions, depending on where the CloudHub resources are physically located. Any hybrid deployment lacks specificity and may not ensure that both data and metadata remain within the designated regions as needed. Therefore, the chosen option presents a robust and compliant architecture.