# DAT-07 Data residency requirements

Domain: DAT Data Protection & Privacy · HI-AAF v1.3 · Public review · https://humanintel.net/standard/dat/dat-07

Data residency requirements are honored, including geographic constraints on inference, storage, and logging.

Cross-border data transfers are governed by documented mechanisms appropriate to applicable law. Data residency requirements, geographic constraints on where inference occurs, where data is stored, and where logs are retained, are honored and enforceable. For agents using cloud-based model providers, the data residency of the provider's inference infrastructure is documented.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for DAT-07: Data residency requirements are documented per agent and data class; residency is enforced by infrastructure configuration; compliance is verified by audit or automated monitoring.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Data residency requirements are documented per agent and data class.
- Residency is enforced by infrastructure configuration.
- Compliance is verified by audit or automated monitoring.

## Framework mappings

- ISO/IEC 42001: A.7.4
- SOC 2 (TSC): P6.1
- EU AI Act: Art. 10(5)
- Singapore: PDPA s.26, MAIGF Data

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cited by INP-04 Sensitive content handling: https://humanintel.net/standard/inp/inp-04

## Cite this control

Human Intelligence. HI-AAF v1.3, DAT-07 Data residency requirements. Public review edition, July 2026. https://humanintel.net/standard/dat/dat-07