Article IV — Foreign Hosting and Data Sovereignty

1. 1.

   All data of Kaharagian origin shall remain under Kaharagian jurisdiction, regardless of physical storage location.

2. 2.

   Foreign-hosted or externally managed services may be employed only where the provider:

   1. operates within non-U.S. or equivalently protective jurisdictions;

   2. enters into binding undertakings to respect Kaharagian sovereignty; and

   3. permits technical and legal audit by the Office of Digital Infrastructure.

3. 3.

   The storage or transmission of sensitive or classified data on unapproved systems is strictly prohibited.