For secure data handling due to export control regulations, running on the client ' s virtual machines without connecting through an enterprise VPN, the combination of a private cloud and infrastructure as a service (IaaS) is suitable. This setup allows the client to have dedicated infrastructure and control over their data environment, ensuring compliance with security and regulatory requirements.