P1-REQ-13-6-010

Return to Part 1 Requirements

Statement

The Conceptual Architecture SHALL distinguish data sovereignty from data residency.

Source

Part 1, Section 13.6: Separation of Concerns Requirements.

Rationale

Data sovereignty concerns governing authority, legal jurisdiction, policy control, and obligations over information. Data residency concerns the location where information resides. These concerns often interact, but they do not express the same architectural concept.

This requirement prevents location from being treated as authority and prevents authority from being treated as physical or logical placement.

Applies To

This requirement applies to the concepts of sovereignty and residency within the Conceptual Architecture.

It applies specifically to:

Data sovereigntyData residencyGoverning authorityInformation locationRelease and movement concerns

Verification

Verification SHALL confirm that the Conceptual Architecture distinguishes data sovereignty from data residency.

Verification activities include review checks confirming that:

Data sovereignty references identify authority, jurisdiction, policy control, or obligation concernsData residency references identify information location concernsResidency does not substitute for governing authoritySovereignty does not substitute for storage or processing location

Traceability

Related source section:

Related requirement identifiers:

Status

Draft

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.