A hospital is planning to rewrite its on-premise patient registration system. Their current system is HIPAA-compliant as well as ISO 27018-compliant. They need to maintain these same certification levels after the rewrite. Their new app also needs to sync PII (personally identifiable information) data with their Salesforce org.

What Heroku Enterprise solutions should an Architect propose?

A. Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Apache Kafka on Heroku to stream from the Salesforce org.
B. Build the app in the Common Runtime, use a Heroku Postgres database, and use Heroku Connect to sync to Salesforce.

C. Build the app in a Shield Private Space, with a Shield Heroku Postgres database, and use Shield Heroku Connect to sync to Salesforce.

D. Build the app in a Private Space with a Private Heroku Postgres database, and use Heroku Connect to sync to Salesforce.