What criteria should you consider when evaluating data security platforms and vendors?