What is true about API implementations when dealing with legal regulations that require all data processing to be performed within a certain jurisdiction $($such as in the USA or the EU$)?$

They must be deployed to Anypoint Platform runtime planes that are managed by Anypoint Platform control planes, with both planes in the same Jurisdiction

They must avoid using the Object Store as it depends on services deployed ONLY to the US East region

They must use a Jurisdiction$-$local external messaging system such as Active MQ rather than Anypoint MQ

They must ensure ALL data is encrypted both in transit and at rest