ADR-002 Data Residency

Context

4 regions (MY, AE, IN, NG) have different data laws. Need a policy.

Decision

• AE: data in UAE (local cloud, compliance with media council)
• MY: data in Malaysia (PDPA)
• IN: data in India (DPDP Act)
• NG: data in Nigeria (NDPA)
• Global metadata (OKF vault): Git-backed, region-tagged, no PII in frontmatter

Consequences

• Multi-region infra
• OKF vault respects residency via region tag — no cross-border PII