An EU diplomat is preparing a confidential report on a humanitarian crisis in a third country. The report contains sensitive personal data of victims and must be securely shared with the EU Delegation in the neighboring country and the EEAS in Brussels. The diplomat must choose a cloud computing solution that strictly complies with EU security and data protection principles, guaranteeing that the data remains under the institution's control and is not transferred to unauthorized third-country jurisdictions. Based on EU security requirements and the data protection framework, what is the most suitable cloud implementation strategy for this high-level scenario?