Data residency

Nebula's posture is Australian-first: data lives in AU regions

unless explicitly bridged.

Where data lives

• Neon Postgres: aws-ap-southeast-2 (Sydney)
• R2 (Cloudflare): apac location hint (Sydney)
• Vercel functions: pinned to syd1

The Anthropic caveat

The LLM (Anthropic Claude) runs in AWS US regions. The redaction

layer (see /docs/security/pii) is what makes this safe; nothing

that left the redaction step contains regulated PII.

For defence-classified projects (OFFICIAL: SENSITIVE) the LLM step

is gated by the defence pack and disabled by default. See

/docs/security/pii for the policy.

Australian Privacy Act

Personal information is handled under the APP regime. The

right-to-erasure flow is documented in /docs/compliance/privacy.

Cross links

• /docs/compliance/irap: data-handling matrix
• /docs/security/encryption: at-rest and in-transit story