Which Agent Platforms Support Per-Customer Encryption Keys and Region-Specific Data Residency?