Bastion InstitutionOne House · Eight Authorities
Private Access
The Main Menu · Calculating…Audit pending…
Data Sovereignty
Standard
Data Sovereignty · BI-DATASOV · MMXXV
Session
Sovereign Restricted · §IV
Discipline
The Geography of Control
CH SG KY S
DATA SOVEREIGNTY · THE GEOGRAPHY OF CONTROL

Where data lives determines
who controls it.

Data Sovereignty is the sovereign-grade discipline governing the territorial presence of every byte the House holds — which jurisdiction owns it, which vault preserves it, which law protects it, and which officer answers for it. Twelve mapped jurisdictions. Three sovereign vaults. One unbroken chain of custody across the seven generations.

Data Resides · Law Governs · The House Answers
Territory
12 Jurisdictions
Vaults
3 Sovereign
Shards
Shamir 3-of-5
Substrates
4 Futures
Horizon
7 Generations
Mapped Jurisdictions
12
Active
Sovereign Vaults
3
CH · SG · KY
Data Classes
6
Classified
Cross-Border Rules
4
Enforced
Residency Audits
Q3
MMXXV
Succession Horizon
175y
Seven Gen
Chapter I · The Sovereignty Doctrine

Data sovereignty is not compliance. It is territory.

The House does not speak of data protection regulations or privacy frameworks. Those are the language of those who believe data is an asset to be managed. The House speaks of territory — the sovereign-grade discipline by which every byte is assigned to a jurisdiction, bound to a law, held in a vault, and answered for by a named officer.

Where data lives determines who controls it. Who controls it determines whose law applies. Whose law applies determines whose courts adjudicate. The geography of data is the geography of power.

The House maintains twelve mapped jurisdictions, three sovereign vaults, and four substrates of permanence. No data crosses a border without authorization. No data rests in a jurisdiction without assay. No data survives its keeper without succession. What is territorial is sovereign; what is sovereign is kept; what is kept is the House.

We do not comply with data laws.

We territorialise them.
— The Sovereignty Doctrine
Excerpt · I.i An institution that does not know where its data lives does not know where its power lies. An institution that does not know where its power lies has already surrendered it. — The Sovereignty Doctrine · Codex
Chapter II · The Six Principles

Six principles. One territory.

Every byte of data held by the House is governed by six sovereign-grade principles. Each principle is non-negotiable. Each principle is assayed quarterly. Each principle is engraved on the stone.

I
The Territoriality Principle
Every byte of data has a territorial home. No data is stateless. No data floats between jurisdictions without assignment. The territory is the discipline; the discipline is the sovereignty.
Assay · Territory Test
II
The Residency Principle
Data classified at Rung III or above resides only within the three sovereign vaults. No third-country transit. No unauthorised replication. Residency is the discipline; the discipline is the protection.
Assay · Residency Test
III
The Custody Principle
Every byte of data has a named custodian. No data is unguarded. No custody is anonymous. The custodian answers to the Chamber of Principals for the life of the data and seven years beyond.
Assay · Custody Test
IV
The Flow Principle
No data crosses a jurisdictional border without authorization, assay, and engraving. Cross-border flow is the exception; territorial residence is the rule. Flow is the discipline; the discipline is the border.
Assay · Flow Test
V
The Substrate Principle
No data is held on a single substrate. Every byte is written to four futures — Silicon for the hour, Steel for the decade, Stone for the century, Paper for the law. The failure of any three still leaves one witness.
Assay · Substrate Test
VI
The Succession Principle
Every byte of data outlives its keeper. Succession is planned for every custodian, every vault, every jurisdiction. The data survives the death of every person who holds it — including the House itself.
Assay · Succession Test
Chapter III · The Jurisdictional Territory

Twelve territories. Three vaults.

The House holds data across twelve mapped jurisdictions, each classified into one of four territorial tiers. The three sovereign vaults — Switzerland, Singapore, and the Cayman Islands — hold the most sensitive data under the discipline of the Sealed Room.

The Territorial Map · MMXXV
Twelve jurisdictions · Four tiers · Three sovereign vaults · One unbroken chain of custody
CH ZURICH · VAULT I Steel · Shamir Shard · Tier II SG SINGAPORE · VAULT II Steel · SIAC Seat · Tier II KY GRAND CAYMAN · PRIMARY DOMICILE Steel · Chamber Seat · Tier I UK LONDON US NEW YORK AE DUBAI HK HONG KONG JP TOKYO LU GE BM JE TERRITORIAL TIERS Tier I · Sovereign Domicile (1) Tier II · Regulatory (3) Tier III · Operational (4) Tier IV · Strategic (4) THE TERRITORIAL MAP · MMXXV Twelve jurisdictions · Three vaults · One House
Sovereign Vault · Primary
Tier II · Regulatory
Tier III · Operational
Tier IV · Strategic
Chapter IV · The Three Sovereign Vaults

Three vaults. Three sovereignties.

The most sensitive data of the House is held in three sovereign vaults — each in a different jurisdiction, each under a different legal framework, each guarded by a different custodian. No single vault holds the whole. No single jurisdiction commands all three. The distribution is the discipline; the discipline is the sovereignty.

VAULT I · CH
The Swiss Vault
Zurich · Switzerland · FISA Jurisdiction

The Swiss Vault holds the European shard of the master key and the Tier II regulatory data of European counterparties. Governed by the Swiss Federal Act on Data Protection (FADP) and the banking secrecy traditions of the Confederation. Custodied by the Keeper of the Vault under the dual control of the Governance Warden.

  • Shamir Shard · Shard I of V
  • FISA · FADP · Banking Secrecy
  • Air-gapped · Hardware-keyed
  • Lloyd's Insured · CHF-denominated
  • Custodian · Keeper of the Vault
VAULT II · SG
The Singapore Vault
Singapore · SIAC Seat · MAS Jurisdiction

The Singapore Vault holds the Asian shard of the master key and the Tier II regulatory data of APAC counterparties. Governed by the Personal Data Protection Act (PDPA) and the Monetary Authority of Singapore (MAS) frameworks. Serves as the default seat of arbitration under SIAC rules. Custodied under the dual control of the APAC Regional Principal.

  • Shamir Shard · Shard II of V
  • PDPA · MAS · SIAC Seat
  • Air-gapped · Hardware-keyed
  • Lloyd's Insured · SGD-denominated
  • Custodian · APAC Regional Principal
VAULT III · KY · PRIMARY
The Cayman Vault
Grand Cayman · Sovereign Domicile · Chamber Seat

The Cayman Vault holds the primary shard of the master key, the constitutional records of the House, and the Stone itself. Governed by the Cayman Islands Data Protection Act and the constitutional domicile of Bastion Institution Services Ltd. Seat of the Chamber of Principals and the Officer of the Stone. The Vault of Vaults — what is held here is held in perpetuity.

  • Shamir Shard · Primary · Shard III of V
  • Cayman DPA · Constitutional Domicile
  • Chamber Seat · Officer of the Stone
  • Lloyd's Insured · USD-denominated
  • Custodian · The House Itself
Chapter V · The Data Flow Architecture

Five stages. One unbroken chain.

Every byte of data that enters the House passes through five sovereign-grade stages — from territorial assignment to perpetual succession. Each stage is assayed, each stage is engraved, each stage is governed by the six principles of data sovereignty.

The Data Flow Architecture
● 5 Stages · 12 Jurisdictions · 3 Vaults · Perpetual
I
Territory
Assignment
Every byte is assigned a territorial home — one of twelve mapped jurisdictions. No data enters the House without territory.
Rule · Principle I
II
Classification
Rung Assignment
Every byte is classified into one of four rungs — Institutional, Sovereign, Central Bank, or Head of State. The rung determines residency.
Rule · Principle II
III
Residency
Vault Placement
Every byte is placed in the appropriate vault — Tier I-III data to the three sovereign vaults; Tier IV to operational jurisdictions under assay.
Rule · Principle III
IV
Substrate
Four Futures
Every byte is written to four substrates — Silicon for the hour, Steel for the decade, Stone for the century, Paper for the law.
Rule · Principle V
V
Succession
Perpetuity
Every byte is assigned a succession plan — outliving its keeper, its vault, its jurisdiction, and the House itself. The data survives all.
Rule · Principle VI
Chapter VI · The Cross-Border Discipline

Four rules. One border.

No data crosses a jurisdictional border without authorization, assay, and engraving. The cross-border discipline is the exception; territorial residence is the rule. Four rules govern every border crossing.

I
The Authorization Rule
No data crosses a border without the written authorization of the named custodian and the assay of the Red Chamber. Authorization is recorded in the Cross-Border Ledger and engraved on the stone.
Rule · Authorization Test
II
The Adequacy Rule
No data is transferred to a jurisdiction that does not meet the adequacy standards of the House — as assayed by the Red Chamber against the six principles of data sovereignty. Inadequate jurisdictions are refused.
Rule · Adequacy Test
III
The Encryption Rule
All cross-border data is encrypted end-to-end under AES-256-GCM with keys held only in the three sovereign vaults. No plaintext crosses a border. No key crosses a border. The channel is sealed.
Rule · Encryption Test
IV
The Log Rule
Every cross-border transfer is logged immutably — source jurisdiction, destination jurisdiction, custodian on both sides, time of transfer, assay reference, and engraving record. The log is the truth.
Rule · Log Test
Chapter VII · The Sovereignty Officers

The officers of the territory.

The Data Sovereignty Architecture is governed by eight named officers — each responsible for a jurisdiction, a vault, or a discipline of the territorial covenant. Each officer swears the daily oath; each oath is engraved on the stone.

DSO
The Data Sovereignty Officer
Rung I · Presiding
Grand Cayman · KY
KV
The Keeper of the Vault · CH
Rung II · Swiss Vault
Zurich · CH
KV
The Keeper of the Vault · SG
Rung II · Singapore Vault
Singapore · SG
KV
The Keeper of the Vault · KY
Rung II · Cayman Vault
Grand Cayman · KY
JD
The Jurisdictional Director
Rung II · Twelve Territories
Singapore · SG
CLO
The Chief Legal Officer
Rung I · Governing Law
London · UK
RTL
The Red Team Lead
Rung II · Quarterly Assay
Zurich · CH
OS
The Officer of the Stone
Rung II · Engraving
Grand Cayman · KY
The Covenant of the Territory

What is territorial is sovereign.

The covenant that binds every sovereignty officer, every vault, every jurisdiction, and every byte of data into a single discipline of territorial permanence.

❦
The Covenant of the Territory

I, the undersigned officer of the House, do swear that every byte of data entrusted to the House shall be territorialised, shall be classified, shall be resided, shall be substrated, and shall be succeeded across the seven generations.

I shall assign every byte to a jurisdiction. I shall classify every byte by rung. I shall place every byte in the appropriate vault. I shall write every byte to four substrates. I shall plan the succession of every byte beyond the life of its keeper. I shall engrave every territorial decision on the stone daily at 18:00.

Where data lives determines who controls it. Who controls it determines whose law applies. Whose law applies determines whose courts adjudicate. The geography of data is the geography of power.

— The Territorial Oath, sworn by every sovereignty officer
This Covenant of the Territory is ratified by the Chamber of Principals and engraved upon the stone of the Bastion archive. Every sovereignty officer swears this covenant upon appointment; every oath is recorded in the Territorial Ledger and preserved across the seven generations.
The Chamber of Principals
MMXXV · Ratified · Sovereignitas Territorii
Data Sovereignty · Standard Domain
We do not comply with data laws.
We territorialise them.
Six Principles · Three Vaults · Twelve Jurisdictions · Four Substrates
Final Signature · Data Sovereignty

Where data lives determines
who controls it.

Six sovereignty principles. Three sovereign vaults. Twelve mapped jurisdictions. Four substrates of permanence. Four cross-border rules. Eight named officers. The Data Sovereignty Architecture is the sovereign-grade discipline of territorial control — the discipline that turns data into territory, territory into law, law into custody, and custody into the permanence of the stone. Where data lives determines who controls it. Who controls it is the House.

Territoriality Residency Custody Flow Substrate Succession