Trust Center · Data Residency
KURAL 27'nin tanımladığı 14 yargı yetkisi temeli + LYDOS AIR M169 pilot bölge listesinin genişletmesi. Posture kolonu dürüsttür:
| Yargı | Düzenleyici | Çerçeve | Posture | Not |
|---|---|---|---|---|
| TRTürkiye | KVKK · BTK | KVKK + 5651 | honored | Production primary. Federation DB in TR. KSL device binding. |
| EUEuropean Union (member states) | EDPB · national DPAs | GDPR + DSA + AI Act | in-scope | Legal posture honoured; data plane in TR today. Multi-region EU node is Q229 roadmap. |
| UKUnited Kingdom | ICO | UK GDPR + DPA 2018 | in-scope | Adequacy decision honoured; processor SCCs available. |
| USUnited States | FTC · state AGs | CCPA/CPRA · HIPAA (BAA-eligible) · SOC 2 prep | in-scope | Standard contractual clauses for trans-Atlantic transfer. |
| CACanada | OPC | PIPEDA | in-scope | Cross-border transfer disclosed in DPA. |
| BRBrazil | ANPD | LGPD | in-scope | Data processor agreement template available. |
| JPJapan | PPC | APPI | in-scope | Cross-border transfer mechanism documented. |
| KRSouth Korea | PIPC | PIPA | in-scope | Cross-border transfer with consent baseline. |
| SGSingapore | PDPC | PDPA | in-scope | Standard contractual clauses for transfer. |
| AUAustralia | OAIC | Privacy Act + APP | in-scope | APP-compliant processor template. |
| AEUnited Arab Emirates | UAE Data Office | PDPL (Federal Decree-Law 45/2021) | roadmap | LYDOS AIR pilot region; commercial mandate in progress. |
| SASaudi Arabia | SDAIA | PDPL (Royal Decree M/19) | roadmap | Pilot region; in-region processing planned with sovereign data partner. |
| INIndia | Data Protection Board | DPDPA 2023 | in-scope | Significant data fiduciary obligations honoured. |
| EGEgypt | PDPC | Personal Data Protection Law 151/2020 | roadmap | LYDOS AIR pilot. Cross-border transfer subject to PDPC approval. |
| DEGermany (additional) | BfDI + Landesdatenschutzbeauftragte | BDSG + GDPR | in-scope | Federal-state DPA coordination; processor template aligned. |
| FRFrance (additional) | CNIL | Loi informatique et libertés + GDPR | in-scope | CNIL-aligned cookie + tracking posture. |
| ITItaly (additional) | Garante | Codice Privacy + GDPR | in-scope | Garante-aligned breach notification SLA. |
| ESSpain (additional) | AEPD | LOPDGDD + GDPR | in-scope | AEPD-aligned standard processor agreement. |
| CHSwitzerland | FDPIC | nFADP (revised, eff. 2023) | in-scope | Adequacy decision-style transfer pattern. |
| MXMexico | INAI | LFPDPPP | roadmap | Regional commercial expansion candidate; standard transfer mechanism applies. |
| ZASouth Africa | Information Regulator | POPIA | roadmap | POPIA-aligned processor template under review. |
| NZNew Zealand | OPC | Privacy Act 2020 | in-scope | Cross-border transfer with comparable-protection assessment. |
Multi-region routing (Q229) controlled-beta'da henüz canlı değil. Dürüst durum için /trust-center/transparency sayfasına bakın. Enterprise tenant'lar için hukuki posture (DPA + SCC + processor agreement) bugün honored — yalnızca veri düzlemi tek-region.