What is a sovereign cloud?
A sovereign cloud keeps your data and workloads under the laws and control of a chosen country. For an Indian organisation, that usually means three things:
- Residency: your data is stored and processed in India.
- Jurisdiction: the provider operating it is subject to Indian law.
- Control: you know who can access your systems, and why.
Data residency is not the same as sovereignty
Residency answers where data sits. Sovereignty also asks who controls it and which laws can reach it. A data centre in India run by a company headquartered abroad may meet residency needs. Whether it meets your sovereignty needs depends on your sector, your contracts and your own risk assessment.
What Indian rules expect (as of October 2026)
- Digital Personal Data Protection Act, 2023, and DPDP Rules, 2025. These govern how personal data is collected, used, protected and retained. Most obligations are being phased in, with the main duties expected to apply from 2027. The law permits transfers abroad except to countries the government restricts, and allows further localisation for specific data.
- CERT-In Directions (2022). Service providers must keep logs of their ICT systems for a rolling 180 days within Indian jurisdiction, and report certain cyber incidents promptly.
- Sector rules. For example, the Reserve Bank of India requires payment system data to be stored in India. Other regulators set their own expectations.
- Government workloads. Ministries and departments generally use cloud services empanelled by MeitY. Antarix Grid is not yet empanelled; contact us if this applies to you.
This is a general overview, not legal advice. Check the official texts or ask your adviser for your situation.
How Antarix Grid approaches sovereignty
- Hosted in India. Customer workloads and their data are hosted on our infrastructure in India. Our console offers an India-only region.
- Built and operated in India. We design, build and run the platform ourselves, in India.
- Clear about what’s live. We label every service Available, Early access, In development or Planned, and we don’t claim certifications we don’t hold.
Questions to ask any cloud provider
- Where exactly are my data and backups stored?
- Which company operates the service, and where is it incorporated?
- Which third parties process my data, and in which countries?
- Where are logs kept, and for how long?
- Who can access my systems, and how is that access recorded?
- How will you notify me of an incident, and how quickly?
- What happens to my data when I leave?
Frequently asked questions
Is my data stored in India?
Yes. Customer workloads and their stored data are hosted on Antarix Grid infrastructure in India.
Is Antarix Grid MeitY empanelled?
Not yet. If you need an empanelled service for government workloads, talk to us about your timeline.
Does using an Indian cloud make me DPDP compliant?
No. Hosting location is one part of compliance. Your organisation remains responsible for how it collects and uses personal data.
Can I see where my workloads run?
Yes. The Antarix console shows your environments, and India is the only region.