01
Physical
Premises access control, locked racks, video surveillance, intervention log.
Sovereignty & security
Your data. Your territory. Your jurisdiction.
Sovereignty is not declared: it is built into the architecture, the contracts and the operating procedures.
Node statusIllustration of a typical node
- Local node
- Operational
- Data
- Encrypted · on-premise
- Outbound traffic
- None
- Jurisdiction
- National law
01Sovereignty & security
Defense in depth
Six layers, from the door of the server room to the people who operate it.
02
Network
Segmentation, strict traffic filtering, complete isolation from the Internet if required.
03
Systems
Hardening, controlled patching, limited and tracked privileged accounts.
04
Data
Encryption at rest and in transit, key management, encrypted and tested backups.
05
Models
Role-based access control, query logging, protection against model extraction.
06
People
Training, access authorizations, written procedures and the least-privilege principle.
02Air-gap
Air-gapped mode
For the most sensitive data, the infrastructure runs with no Internet connection whatsoever. Models and patches are delivered on encrypted media, with integrity verified by signature before installation.
- No outbound traffic
- Signed, verified updates
- Local, tamper-proof audit log
- Monitoring over the internal network
03Map
Data protection law map
Key national legislation, for guidance only. Each project undergoes a specific analysis, confirmed with local legal counsel when necessary.
- 54countries mapped
- 37national laws referenced
- 17frameworks to analyze during the audit
54 countries mapped
See all 54 countries and their legislation
| Country | Main legislation |
|---|---|
| Algeria | Loi n° 18-07 du 10 juin 2018 |
| Angola | Lei n.º 22/11 — Lei da Protecção de Dados Pessoais |
| Benin | Loi n° 2017-20 portant Code du numérique |
| Botswana | Framework to be analyzed during the audit |
| Burkina Faso | Loi n° 001-2021/AN du 30 mars 2021 |
| Burundi | Framework to be analyzed during the audit |
| Cabo Verde | Lei n.º 133/V/2001 |
| Cameroon | Framework to be analyzed during the audit |
| Central African Republic | Framework to be analyzed during the audit |
| Chad | Loi n° 007/PR/2015 du 10 février 2015 |
| Comoros | Framework to be analyzed during the audit |
| Côte d'Ivoire | Loi n° 2013-450 du 19 juin 2013 |
| Djibouti | Framework to be analyzed during the audit |
| DR Congo | Ordonnance-loi n° 23/010 du 13 mars 2023 portant Code du numérique |
| Egypt | Loi n° 151 de 2020 sur la protection des données personnelles |
| Equatorial Guinea | Framework to be analyzed during the audit |
| Eritrea | Framework to be analyzed during the audit |
| Eswatini | Data Protection Act, 2022 |
| Ethiopia | Personal Data Protection Proclamation No. 1321/2024 |
| Gabon | Loi n° 001/2011 relative à la protection des données à caractère personnel |
| Ghana | Data Protection Act, 2012 (Act 843) |
| Guinea | Loi L/2016/037/AN (cybersécurité et données personnelles) |
| Guinea-Bissau | Framework to be analyzed during the audit |
| Kenya | Data Protection Act, 2019 |
| Lesotho | Data Protection Act, 2011 |
| Liberia | Framework to be analyzed during the audit |
| Libya | Framework to be analyzed during the audit |
| Madagascar | Loi n° 2014-038 sur la protection des données à caractère personnel |
| Malawi | Data Protection Act, 2024 |
| Mali | Loi n° 2013-015 du 21 mai 2013 |
| Mauritania | Loi n° 2017-020 du 22 juillet 2017 |
| Mauritius | Data Protection Act 2017 |
| Morocco | Loi n° 09-08 (CNDP) |
| Mozambique | Framework to be analyzed during the audit |
| Namibia | Framework to be analyzed during the audit |
| Niger | Loi n° 2017-28 du 3 mai 2017 |
| Nigeria | Nigeria Data Protection Act, 2023 |
| Republic of the Congo | Loi n° 29-2019 du 10 octobre 2019 |
| Rwanda | Loi n° 058/2021 du 13/10/2021 |
| São Tomé and Príncipe | Lei n.º 03/2016 |
| Senegal | Loi n° 2008-12 du 25 janvier 2008 |
| Seychelles | Data Protection Act, 2023 |
| Sierra Leone | Framework to be analyzed during the audit |
| Somalia | Data Protection Act, 2023 |
| South Africa | Protection of Personal Information Act (POPIA), 2013 |
| South Sudan | Framework to be analyzed during the audit |
| Sudan | Framework to be analyzed during the audit |
| Tanzania | Personal Data Protection Act, 2022 |
| The Gambia | Framework to be analyzed during the audit |
| Togo | Loi n° 2019-014 du 29 octobre 2019 |
| Tunisia | Loi organique n° 2004-63 du 27 juillet 2004 |
| Uganda | Data Protection and Privacy Act, 2019 |
| Zambia | Data Protection Act, 2021 |
| Zimbabwe | Cyber and Data Protection Act, 2021 |
Information provided for guidance only and does not constitute legal advice. Legislation changes regularly.
Design references
- Malabo Convention (African Union)
- ISO/IEC 27001
- NIST Cybersecurity Framework
- National data protection laws
05Contact
Let's talk about your project.
One conversation with an architect is enough to clarify your needs and the next steps. Confidentiality guaranteed from first contact.
Headquarters · Dubai
Westburry Office Tower
Marasi Drive, Business Bay
Dubai, United Arab Emirates 1 to 4 hours' difference with the continent Open in Google Maps
Marasi Drive, Business Bay
Dubai, United Arab Emirates 1 to 4 hours' difference with the continent Open in Google Maps