Sovereign Data: Residency & Governance
Your data, on your terms.
Get residency, governance, and architecture built around your GCC, EU, North American, and APAC obligations, so where your data lives is your decision, not an accident.
Control stays with you.
Provable residency
Know, and demonstrate, exactly where every dataset lives and moves.
Regulator-ready
Your governance mapped to GDPR, GCC frameworks, and sector mandates.
No lock-in
Portable, well-documented architecture that keeps your options open.
What's included.
- Residency architecture
- Region-aware data design across your cloud, on-prem, and hybrid estates.
- Data governance
- Classification, lineage, retention, and ownership your teams can follow.
- Compliance mapping
- GDPR, GCC residency rules, and your industry's mandates translated into controls.
- Secure migration
- Move your regulated data with validation and zero silent drift.
- Access & identity
- Least-privilege access, encryption, and key management built into your design.
Updated 27 October 2026
What the EU Data Act changes.
Your cloud exit terms now belong inside your sovereignty plan, not after it. This is not legal advice.
- In force now
- The EU Data Act, Regulation (EU) 2023/2854, has applied since 12 September 2025 (Article 50). Its cloud switching rules cover providers serving customers in the EU, wherever the provider is based.
- Switching charges
- From 12 January 2027, providers may not charge switching charges, which include data egress (Article 29). Standard service fees and early termination penalties can still apply, so leaving is not automatically free.
- Exit timelines
- Contracts must allow a notice period of no more than two months and a transitional period of up to 30 calendar days. A provider can justify up to seven months where 30 days is technically unfeasible (Article 25).
- Proposed changes
- The Digital Omnibus would amend parts of the Data Act. The Council agreed its negotiating position on 21 October 2026. It is a proposal, not law.
Sources: Regulation (EU) 2023/2854, EUR-Lex; Council of the EU press release, 21 October 2026. Checked 27 October 2026.
How you take control.
Map
See your data, its flows, and the rules that apply to each.
Architect
Your design puts residency first, mapped to the obligations that apply to you.
Migrate
Your regulated data moves with validation at every step.
Govern
You keep standing controls, evidence, and ongoing oversight.