Guides  /  Operations and deployment

How do you keep agent data inside a jurisdiction?

Answer

Every place the data comes to rest has to be inside the jurisdiction. Residency covers the agent's memory, the event journal behind it, and the interaction record kept for compliance. The replicas that hold those copies and the control plane that operates the installation are inside the boundary as well.

Akka runs sovereign deployments where traffic and data stay in-region, with data isolation, networking isolation, and local SREs. HA and DR run at full parity with every other Akka region.

The mechanism

Residency applies to every copy the system makes.

An agentic system records the same fact in several places. Agent memory holds what the agent learned. The event journal holds the events that produced that memory. The interaction log holds what was asked, what the model returned, and which policy verdict applied. A replica in a second region holds each of those records again.

Each of those copies carries the residency obligation attached to the data in it. A deployment that keeps the primary in-country and replicates its backups to a cheaper region has moved the data out of the jurisdiction.

People reach the data as well. An SRE reading a log and a support engineer opening a trace both touch data that has a location and an operator.

COPIES OUTSIDE THE BOUNDARYin-countryrequestmemory writejournalleavesevidence logreplicaoperator accessEVERY COPY INSIDE THE BOUNDARYin-countryrequestmemory writejournalevidence logreplicaoperator access
What a sovereign deployment covers

A country-isolated configuration holds the traffic, the copies, and the operators.

Data isolationAgent state, journals, and evidence records are stored inside the region and replicated only to regions inside the boundary.
Networking isolationTraffic between components stays in-region and crosses a private federation plane.
Local operationsThe SREs supporting the installation work inside the jurisdiction, so operational access to the data does not cross the border.
Full-parity HA and DRActive-active replication, recovery under a minute, and zero committed data lost apply inside the sovereign boundary.

Akka supports country-isolated deployment in China, Hong Kong, Singapore, the EU, the UK, Japan, Australia, Canada, and North America. Akka also runs on sovereign clouds including T-Systems and AllyCloud, so public, private, and country-isolated deployments come from one platform.

What this changes

Residency is one row in a larger obligation set.

GDPR Chapter V governs transfers of personal data out of the EU. China's Generative AI Interim Measures apply to systems serving users in China. A system operating in several countries carries the residency rules of each.

Akka Verify derives which controls apply from what a system does, what data it touches, and where it runs, against a corpus of 190 AI regulations and 1,230 controls. Each residency row in that obligation set carries its citation, the runtime binding that enforces it, and the evidence event that proves the binding ran.

Questions

Related questions.

Does a sovereign deployment give up high availability?

Active-active HA and DR run at full parity inside a sovereign configuration. Recovery takes under a minute and no committed write is lost, matching any other multi-region Akka deployment.

Where does the control plane run?

A sovereign configuration runs a private federation plane inside the boundary, so deployment and operational metadata stay in the same jurisdiction as the workload.

What about the model the agents call?

A hosted model provider serving from outside the region makes every inference call a cross-border transfer. Akka Optimize tunes specialized models from an open-weight base inside your own environment and serves them there, which keeps the call inside the boundary.

Who can read the data during an incident?

Local SREs staff a sovereign region, and the interaction record shows which identity read what. Support access is answerable to the same authority as the workload.

On Akka. Sovereign deployment, the private federation plane, and in-region operations are configurations of the Akka Agentic AI Platform. Obligation derivation is a capability of Akka Verify. Instruments named. GDPR Chapter V and the China Generative AI Interim Measures are public regulatory texts.