A company's legal department drafted sensitive documents in a SaaS application and wants to ensure the documents cannot be accessed by individuals in high-risk countries. Which of the following is the most effective way to limit this access?


A. Data masking
B. Encryption
C. Geolocation policy
D. Data sovereignty regulation