Body of Knowledge · October 2026 · thesovereignstack.org
The Sovereign Stack

Body of Knowledge · Data · D1

Residency

Where is data stored and processed?

82 out of 100 · Sovereign

Average of 267 scored findings; 144 findings carry no evidence on this dimension and are not counted.

1. By sector

  1. Local Government 94
  2. Schools 88
  3. NHS 87
  4. Defence 83
  5. Policing 81
  6. Central Government 80
  7. Devolved Governments 78
  8. BBC 67
  9. Higher Education 66

2. How findings split

  • Exposed 2
  • Dependent 69
  • Partly sovereign 3
  • Sovereign 193

How we score it

Each finding is scored 0 (exposed) to 3 (sovereign) from the evidence field below; the page index is the average, scaled to 100.

hosting location
UK 3
EU 2
Mixed 1
US 0
The full method

3. Most exposed

  1. Managed detection & response (Expel) - QEII Centre 0 Central Government · Cabinet Office · Expel (Find a Tender Service, 2026)
  2. GitHub Copilot (AI coding assistant) and GitHub hosting 0 BBC · BBC Public Service · Microsoft (GitHub) (GOV.UK, 2026)
  3. Microsoft Windows 10/11 Enterprise desktops (licensed via national Microsoft agreement) 33 NHS · NHS – National · Microsoft (TechRadar, 2025)
  4. NHS App on iOS and Android 33 NHS · NHS – National · Apple; Google (Digital Health, 2025)
  5. Oracle Health (Cerner Millennium) EPR 33 NHS · NHS – Trust · Oracle (Nhs-tech, 2026; Oracle, n.d.)

4. Most sovereign

  1. SG core WAN circuits migrating from SWAN1 (Capita) to SWAN2 (BT), 131 sites 100 Devolved Governments · Scottish Government (iTECS core WAN) · BT (SWAN2); Capita (SWAN1, exiting) (Gov, 2025)
  2. Scottish Wide Area Network 2 (SWAN2): fibre, mobile, resilience and cyber services for Scottish public bodies 100 Devolved Governments · NHS National Services Scotland / PSD Scotland (SWAN, cross-Scotland) · BT (Nss, 2023)
  3. Ultra Cyber Multi Link Encryptor (MLE) family – NCSC CAPS-certified SECRET tactical data link crypto 100 Defence · Cross-defence · Ultra Cyber (National Cyber Security Centre, 2026; Defensenews, n.d.)
  4. MOD Palantir Enterprise Agreement (data analytics licensing & support) 100 Defence · MoD · Palantir (Find a Tender Service, 2026; PublicTechnology, 2026)
  5. Palantir defence AI/decision-support (strategic partnership) 100 Defence · MoD · Palantir (Computing, 2025; PublicTechnology, 2026)
Explore every finding in the playground All twelve dimensions
Also in Data