Data residency
10 articles
Sovereign AISovereign AI is a placement problem
Sovereign AI is often discussed as a question of who owns the data centre. In practice it comes down to three engineering questions: where each request runs, who controls the keys, and what can be proven afterwards. Each one can be answered in the infrastructure itself.
5 min read
Financial servicesAI in Financial Services: Records an Examiner Can Verify
Banks, insurers and asset managers are moving AI into credit, claims, compliance and operations. Supervisors in the EU, UK, US and Singapore expect model inventories, third-party oversight and records. What a verifiable inference record should contain, and how to keep it.
4 min read
HealthcareAI in Healthcare: When the Data Cannot Move, Move the Model
Clinical and research data is among the most regulated anywhere. Three patterns that bring AI to health data without moving it (local serving, confidential computing and federated training) and the evidence each one should produce.
4 min read
Computer visionComputer Vision at the Edge: Infer Locally, Escalate Rarely
Cameras produce far more pixels than anyone should ship to a data centre. A tiered architecture for vision AI: small detectors at the camera or gateway, larger models only for the frames that need them, and privacy built into the split.
4 min read
Confidential computingConfidential Computing for Regulated AI: What Attestation Proves
TEE sessions and remote attestation let a regulated workload run on someone else's hardware with evidence of what code ran. What a report actually proves, what it cannot, and how Tenzro verifies, binds and routes confidential work.
5 min read
Data residencyData residency by design: pinning AI work to a jurisdiction
Residency rules for AI are moving from contract clauses into the request path. This article explains how to make jurisdiction a routing constraint that fails closed, what evidence a signed record of locality can and cannot give you, and how the rules differ across the EU, UK, MENA and APAC.
6 min read
Sovereign AIEU AI Act, NIS2 and the Data Act: a guide for AI operators
Three EU laws now shape how AI infrastructure is run in Europe. This guide sets out the dates that apply after the 2026 Digital Omnibus on AI, the obligations that reach operators, and the evidence worth producing by default.
7 min read
NetworkingMulti-region AI: latency, jurisdiction and failover
Running AI across the EU, US and APAC forces trade-offs between distance, law and resilience. This article uses measured inter-region latencies to show what each region pair costs, how jurisdiction rules constrain failover, and how to design inference that stays fast, lawful and available when a provider fails.
5 min read
Public sectorPublic Sector AI: Buying Capability Without Buying Lock-In
Governments in the US, UK and EU now tell agencies to avoid AI vendor lock-in, protect government data from commercial training and assess impacts before deployment. A procurement checklist that turns those policies into contract terms and architecture.
4 min read
RetrievalRetrieval at the Source: Embeddings and Search Near the Data
Retrieval pipelines copy an organisation's documents into embeddings, indexes and caches, often far from where the data lives. Why embeddings are sensitive data, how to size them, and an architecture that keeps retrieval close to the source.
4 min read