Sovereignty Audit

A Sovereignty Audit shows where your data actually lives, which countries' laws can reach it, and how that sits with the Australian Privacy Principles. You get a sovereignty rating and a migration path.

All audits

What is a Sovereignty Audit?

A look at where your data actually lives, which countries’ laws can reach it (for example, the US CLOUD Act), and how that sits with the Australian Privacy Principles.

What do you get?

  • A sovereignty rating, scored the same way for every client
  • A migration path

Frequently asked questions

What is a Sovereignty Audit?

A check of where your data actually lives, which countries' laws can reach it, and how that sits with the Australian Privacy Principles.

What is the US CLOUD Act?

It's a US law that can require US-based providers to hand over data they control, even when it's stored outside the US. It's one example of a foreign law that can reach Australian business data.

What is the sovereignty rating?

A rating of where your data lives and who can reach it. It's scored the same way for every client.

What happens after the audit?

You get a migration path. If you want help following it, that's what our Data Sovereignty service is for.

Ask us anything — free, by email.

Tell us what's going on and we'll give you a straight answer, even if the answer is "you don't need us."

The fine print, in plain English: free advice is general information for a one-off question, given in good faith. It doesn't make you a client and isn't a substitute for a proper look at your systems, and to the extent the law allows, we're not liable for how it's used. Anything beyond that one answer, like follow-up help or work on your systems, is a paid service that we agree with you in writing first.

See our Website Terms and Privacy Policy. We never sell your details.