Data sovereignty
What is BSI C5 and does storage need to meet it?
A German hospital network evaluates a cloud provider for clinical data. A federal agency reviews a software vendor's hosting. A service provider wants to sell ...
Author
Joshua Silvia
Data sovereignty
What is SecNumCloud and what does it require from storage?
A French ministry wants to move a sensitive case management system to the cloud. A hospital group needs a hosting provider for patient records. A regional ...
Data sovereignty
Sovereign cloud architecture: Mapping external control
A cloud platform can store every production record inside one country while relying on an overseas service to approve administrator logins. Its backups can ...
Data sovereignty
Data sovereignty procurement: Checking subcontractors
A storage contract is signed with one company. The system it delivers is usually run with help from several others: a colocation provider holding the racks, a ...
Data sovereignty
Sovereign storage operations: Who can change the system?
Residency controls answer where bytes sit. They do not answer who can change how the system treats them. A firmware package from a hardware vendor, an ...
Data sovereignty
Data deletion verification: What storage can prove
A delete request returns success in a few milliseconds. What that response confirms is narrow: the namespace will no longer return the object on a read. It ...
Data sovereignty
Cloud exit planning: Proving you can retrieve your data
Most cloud contracts contain an exit clause. It grants the right to retrieve data and sets a notice period, and it is usually drafted without reference to how ...
Data sovereignty
Metadata residency: Where object details are stored
Residency requirements are usually written about object data, and the architecture that satisfies them usually separates object data from everything that ...
Data sovereignty
Data sovereignty for AI: Mapping copies and access
A dataset that sits in one approved location at the start of an AI project rarely stays that way. Preparation, training and inference each produce their own ...
Data sovereignty
Sovereign disaster recovery: Avoiding shared failure
A disaster recovery site can satisfy every residency requirement on paper and still go down in the same hour as production. Distance and jurisdiction are the ...