Privacy & Data Protection
Data sovereignty
Data sovereignty is the principle that data is subject to the laws of the country where it's located or controlled — the legal layer above data residency.
Data sovereignty concerns whose laws govern data: storage location, but also the nationality of the provider who controls it. A US-headquartered cloud can face US legal process for data stored abroad, which is why sovereignty debates outlive pure residency fixes.
For AI adoption, sovereignty drives procurement in government, health, and finance: preferences for domestic or EU providers, contractual limits on foreign access, and interest in self-hosted models. It's the reason "where is the model hosted, and by whom" appears in security questionnaires.
Where this shows up
Related terms
See it in your own organization.
Sanitized AI inventories the AI tools in use and redacts sensitive data from prompts before it leaves.