A company will deploy a conversational chatbot built from a fine-tuned Amazon SageMaker JumpStart model and must demonstrate compliance with multiple regulatory frameworks. Which capabilities can help demonstrate compliance? (Choose two.)

Threat detection and data protection are crucial for demonstrating compliance with regulatory frameworks when deploying a conversational chatbot. Threat detection capabilities, such as monitoring for malicious inputs or unauthorized access attempts, help ensure the chatbot operates securely and doesn't become an attack vector. Data protection mechanisms, including encryption of data at rest and in transit, access controls, and data retention policies, are essential for safeguarding sensitive user information and adhering to privacy regulations like GDPR or HIPAA. Auto scaling inference endpoints and loosely coupled microservices are architectural best practices for scalability and resilience, but don't directly address compliance requirements. Cost optimization is a business concern, not a compliance one.