Multi-region replicated database

Design a multi-region replicated database for a global SaaS app with users in NA, EU, and APAC, serving 150k reads/sec and 30k writes/sec. Reads should be served locally (sub-10ms in-region) and writes must survive the loss of an entire region with zero data loss. EU user data must physically reside in the EU. What replication topology and consistency model do you pick, and how do you handle a region failover?