8-Jurisdiction Registry
EU, US, UK, CA, SG, AU, JP, CH jurisdictions with AI regulations, compliance frameworks, and data classification transfer rules matrix. Adequacy decisions for EU↔UK/CA/JP/CH.
Data Classification Matrix
Transfer rules per data class: CLASSIFIED (never), PHI (US/EU/UK/CA/CH only), PII/FINANCIAL/GENERAL (all, adequacy check). Sovereign Pod Tags per entity.
Per-Tenant Routing Policy
Per-tenant data-class overrides (PHI→US only, CLASSIFIED→none). BLOCK/DIRECT fallback. Redis-backed with in-memory fallback.
GDPR Art. 35 DPIA
Data Protection Impact Assessment for sovereign routing decisions. Article 35 documentation, risk mitigations, residual risk scoring.
Sovereignty Report API
GET /sovereign/report — full jurisdiction compliance summary, active tunnels, attestation count, routing decisions, adequacy partners.