Hyperscalers
Regional cloud providers
Your own data centre
Sovereignty
orders-api
Where it runs
Jurisdiction
Who can operate it
Encryption keys
Portability
Audit evidence