A client runs an application on a background worker dyno. The application allows its users to request personalized information as a PDF. At peak usage, the app processes millions of requests at once. The resulting number of requests has caused a bottleneck that is impacting its performance.
Which two solutions can an Architect recommend to resolve the bottleneck and improve performance? (Choose two.)

A hospital wants to build a mobile app that allows patients to check the status of submitted insurance claims, which the hospital stores in Salesforce Health Cloud. The app's back end will run on Heroku.
Which two measures should an Architect recommend to help ensure that the app is compliant with HIPAA? (Choose two.)

Canvas apps can authenticate a user with:

Universal Containers has a Heroku app that uses several third-party add-ons. They now need to enforce data privacy and be compliant with General Data Protection Regulation (GDPR).
What should an Architect advise UC regarding data residency in this scenario?

A customer's IT department will not allow VPN access through their on-premise gateway. Users need to be able to access trusted Heroku applications only when they are in the office. These applications are deployed to a Heroku Private Space.
Which two Private Spaces features should an Architect recommend to enable on-premise users to gain the access they need? (Choose two.)