Solution briefSolutions

Sovereign Cloud — solution brief

Run the platform fully air-gapped and in-country with in-region models only — provable data residency, no call-home, for regulated and government estates.

3 min read · 2 pp PDFUpdated September 2026 · v1.0
Download the PDF

A4 · no form, no email required

Talk to us about it
A blue bridge carrying glass blocks between two silver campuses

Sovereign Cloud is the deployment for estates that must prove where data lives and who can reach it: the control plane runs in-country, on your own cloud, on-premises or fully air-gapped, with an offline update channel and no call-home. Whale AI runs on in-region models inside the perimeter, and the audit trail is WORM-backed, so sovereignty is a property of the architecture rather than a clause in a contract.

Air-gapped
Deployment class with signed offline update bundles and no outbound connectivity
In-region AI
Whale AI Abyss on local models — zero external calls
5 + in-country
SaaS regions (SIN · BOM · DXB · FRA · LAX), or BYOC / on-prem anywhere

How it shows up

  • The residency answer is a vendor letter, not a property of the system.
  • AI adoption is blocked because prompts and documents would leave the jurisdiction.
  • Air-gapped sites are managed by hand, outside the governance the rest of the estate has.

How it works

  1. 1

    Step 1

    The platform is deployed inside national borders — BYOC, on-premises or fully air-gapped.

  2. 2

    Step 2

    An air-gapped control plane runs with no outbound connectivity; updates arrive as signed offline bundles.

  3. 3

    Step 3

    Residency rules are enforced on every resource and record; directorates are segregated under central policy.

  4. 4

    Step 4

    In-region models deliver Whale AI without data leaving the jurisdiction.

  5. 5

    Step 5

    Sovereignty is evidenced on demand from the WORM-backed audit trail and residency controls.

What is included

  • Air-gapped Government Edition deployment with offline update channel
  • In-region models only — no call-home
  • BYOC option in your own cloud, or on-premises
  • Provable data residency, WORM-backed audit log, FIPS-validated cryptography

Modules involved

Sovereign Operations

In-country deployment, segregation, air-gapped classes and offline-tolerant edge.

Identity & Access

One identity fabric — federate your IdP and auto-provision access everywhere.

Whale AI

A horizontal AI layer across every module — 50+ use cases, able to run fully offline.

Editions and audience

Recommended editions: Government and Enterprise.

Who it is for: National governments, defense agencies, central banks and regulated public sector.

Delivered engagement — Defence & Interior ministries, Middle East

Two ministries with disconnected, air-gapped estates across many directorates deployed the Government Edition fully in-country, put every directorate under one security baseline and central policy, and began answering audit queries from a system of record in minutes.

“An audit query used to take days, directorate by directorate. It is now answered from one system of record in minutes — and the residency and segregation evidence is in the architecture itself.”
Head of IT Security, Defence & Interior ministries, Middle East — as reported by the customer

Questions teams ask in the evaluation

01

How do updates reach an air-gapped estate?

Signed release bundles are transferred through your approved process and verified on import. Nothing calls home, and there are no forced upgrades on sovereign estates.

02

Does Whale AI work without internet?

Yes. The Government Edition runs Whale AI Abyss on in-region models inside the perimeter, with no external calls.

03

Can we connect sovereign hyperscaler regions?

Yes — AWS GovCloud, Azure Government, Google Distributed Cloud and national sovereign clouds connect through the same connectors, governed by the same policy plane.

Next step

Take this from paper to your own estate.

A 45-minute working session with a solutions engineer: one of your accounts connected read-only, the parts of this document that matter to you shown on your real resources.