> ## Documentation Index
> Fetch the complete documentation index at: https://docs.connex.hybridsphere.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Multi-Region Data Sovereignty

> Physical database isolation and sovereign cryptographic control complying with statutory PIPA, CCPA, and GDPR frameworks

CONNEX Cloud OS strictly enforces **physical database isolation by statutory jurisdiction** coupled with sovereign key management to eliminate cross-border compliance risks.

<CardGroup cols={2}>
  <Card title="Republic of Korea Jurisdiction (PIPA)" icon="landmark">
    All user credentials, profiles, VFS documents, and session histories for Korean residents are permanently isolated within dedicated Firestore databases in **Seoul (`asia-northeast3`)**, strictly blocking unauthorized cross-border transfers.
  </Card>

  <Card title="United States & Global Jurisdiction (CCPA/GDPR)" icon="globe">
    Data for US and international users resides exclusively within dedicated Firestore databases in **Iowa (`us-central1`)**, fully adhering to SOC 2 Type II and CCPA requirements.
  </Card>
</CardGroup>

***

## Sovereign Key Control & Cryptographic Boundary

In addition to physical multi-region database boundaries, enterprise tenants can maintain complete custody over their data through Customer-Managed Encryption Keys (CMEK) and the **Instant Cryptographic Kill Switch**:

* **Customer-Managed Key Custody**: Enterprise clients host their Key Encryption Keys (KEKs) directly within their own cloud accounts (GCP Cloud KMS or AWS KMS).
* **Instant Access Revocation (Kill Switch)**: By disabling the key within their own KMS console, all data reads across CONNEX VFS and Agentic RCAG pipelines immediately fail closed with **HTTP 423 Locked** (`KeyAccessRevokedError`).
* **Zero Cross-Jurisdictional Contamination**: Cryptographic keys and encrypted payloads never transit outside their designated regulatory perimeter.

<Warning>
  Users select their statutory country of residence upon registration. Once set, the jurisdictional binding is strictly permanent to prevent cross-border data leakage.
</Warning>


## Related topics

- [CONNEX | Docs Center](/index.md)
- [System Architecture](/get-started/architecture.md)
- [Virtual File System (VFS)](/features/vfs.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.