Where your data is right now

Every tagged data node has a unique cryptographic ID. The map shows the data centre each one sits in, every transfer between them, and turns red the moment a node leaves the jurisdiction your policy approves.

Command map uses simulated workloads

All data centres Labels Compute heat

Speed Random incidents Hover a data centre for details. Drag to pan, scroll to zoom.

Data volume by country

Transfers by path

Counted since the workload was last reset.

Data volume by provider

Tag

Each record set, payload or file chunk gets a unique SHA-256-derived ID when it is created.

Trace

Agents report every hop. Transfers are classed as intra-state, cross-state or cross-border, with distance and latency.

Compare

Each location is checked against the active policy at country, state or data-centre level, and blocked in enforce mode.

Prove

Every event is written to a hash-chained log. Verify the chain and export JSON or CSV evidence for auditors.

Live network: where this computer is sending data

Reads the real, established TCP connections on this machine, matches each remote address against the cloud providers' published IP ranges, and checks the location against your active policy. Nothing is simulated on this page.

Auto-refresh every 15 s

Connections

Process	PID	Remote	Provider / region	Location	Verdict	How we know
Press “Scan connections now”.

Cloud storage: real buckets, real movements

Connects to your cloud storage with read-only keys, tags every object with a Sovereignty node ID, and watches where each one is stored, copied or moved. Anything that leaves the approved jurisdiction is flagged, written to the audit chain and included in the legitimacy report.

Not connected

Buckets and fill levels Allocation is the capacity you plan for each bucket. Cloud buckets have no hard limit, so overflow is judged against this.

Connect a provider to see buckets.

Data movements

Time	Kind	Node	From → To	Path	Size	Status

Findings

Test lab: real buckets, synthetic records

Creates three buckets in your AWS account and streams clearly-labelled synthetic government records into them. When the primary bucket reaches its allocation, new writes overflow to the second Indian region, then abroad. The monitor has to detect every step on its own. Uses a few cents of S3 requests; press Clean up when finished.

Primary region (India) Overflow region (India, optional) Foreign spill region Allocation per Indian bucket (KB)

Legitimacy report and notice

A printable report of where the data is, what moved, and which findings are open, with the audit-chain hash as evidence.

Open report Download HTML Download JSON

Draft a notice email

Data nodes and lineage

Every tagged node, where it is, and every place it has been. Select a node to replay its route on the map.

Node ID	Dataset	Class	Data centre	State	Country	Size	Moves	Status

Audit trail and evidence

Every event carries the SHA-256 hash of the event before it. Editing, deleting or reordering any line breaks the chain, and verification tells you exactly where.

Export JSON report Export CSV

Events

#	Time (UTC)	Type	Node	From → To	Path	Status	Reason	Actor	Hash

Integrations and API

Connect real agents (eBPF probes, storage hooks, CI pipelines, Kubernetes admission controllers) and pull evidence into other systems. All endpoints are under /api/v1 and accept your API key in the X-API-Key header.

API key

Rotating immediately invalidates the old key for every agent using it.

Report a data movement (agent ingest)

Read the current state

Pull the audit evidence

Subscribe to live events (Server-Sent Events)

Endpoints

Method	Path	Purpose

Test an ingest from here

Custom jurisdiction policy

Settings

Where this computer is, so the live map can draw outgoing connections from the right place.

This computer's location

Change password

About

Version
Catalogue
Map data: Natural Earth 1:50m via world-atlas (public domain)
Developed by: Panacea Vista Solutions Pvt Ltd

Sovereignty Engine

Sign in

Where your data is right now

Data volume by country

Transfers by path

Data volume by provider

Tag

Trace

Compare

Prove

Live network: where this computer is sending data

Connections

Cloud storage: real buckets, real movements

Buckets and fill levels Allocation is the capacity you plan for each bucket. Cloud buckets have no hard limit, so overflow is judged against this.

Data movements

Findings

Test lab: real buckets, synthetic records

Legitimacy report and notice

Draft a notice email

Data nodes and lineage

Audit trail and evidence

Events

Integrations and API

API key

Report a data movement (agent ingest)

Read the current state

Pull the audit evidence

Subscribe to live events (Server-Sent Events)

Endpoints

Test an ingest from here

Custom jurisdiction policy

Settings

This computer's location

Change password

About

Sovereignty Engine

Sign in

Where your data is right now

Data volume by country

Transfers by path

Data volume by provider

Tag

Trace

Compare

Prove

Live network: where this computer is sending data

Connections AllOutside policyCloudUnknown

Cloud storage: real buckets, real movements

Buckets and fill levels Allocation is the capacity you plan for each bucket. Cloud buckets have no hard limit, so overflow is judged against this.

Data movements AllOut of policyCross-borderCross-state

Findings

Test lab: real buckets, synthetic records

Legitimacy report and notice

Draft a notice email

Data nodes and lineage

Audit trail and evidence

Events AllTransfersBlockedBreachesScenariosPolicyIngest

Integrations and API

API key

Report a data movement (agent ingest)

Read the current state

Pull the audit evidence

Subscribe to live events (Server-Sent Events)

Endpoints

Test an ingest from here

Custom jurisdiction policy

Settings

This computer's location

Change password

About

Connections

Data movements

Events