Your organization is moving its customer support logs and chat data to Google Cloud. The support analytics team needs to analyze the logs in BigQuery but must not access or modify customer PII stored in Cloud Storage. What is the simplest and most secure way to meet these requirements?