Keeping control over data, infrastructure and software under the rules of a chosen jurisdiction. Covers data residency and access, customer-held encryption keys, sovereign and private cloud offerings, avoiding vendor lock-in, and public-sector requirements.