AI data sovereignty and audit-readiness for organisations handling confidential and government data

Could you prove that confidential data inside your organisation never left Australian territory?

If you hold government data, your contract already says this. APP 8 of the Privacy Act, an IRAP assessment, hosting terms that name the region. Nobody is waiting on new legislation to hold you to it.

A senior government official put this to me recently. How can you guarantee me that the confidential data is never shared with anyone else, meets the privacy laws, and stays in Australia?

Then the question that actually mattered. If you were taken to court, do you have the audit trail to prove the outcome?

That is where the conversation usually stops. There's an AI policy document. There's a clause in the contract. There is nobody who can produce a log.

An auditor does not want your policy. They want evidence. Which model processed the prompt, in which region, under which key, at what time, and who authorised it.

That is an architecture decision, not a governance decision.

Two things have to be true, and both are build decisions:

One. Processing is locked to Australian regions at the organisation level, enforced above the developer rather than chosen by them. Cross-region routing is on by default. A prompt written in Brisbane gets processed offshore, nobody did anything wrong, and your sovereignty claim is gone.

Two. Every request writes to an append-only log, held in Australia, for as long as the contract demands. Append-only means an entry stays written once it is written, and your own admin shows up in that log like everyone else. Settle who can read it, who can export it, and how long it lives, this quarter.

Send this to your IT lead or your AI vendor this week. Ask for evidence:

Which region processed our AI requests last Tuesday? Show me the log line. Who holds the encryption keys for that data, us or the vendor? Can you produce every model invocation for a named project across the last 90 days? Can anyone on our team edit or delete those logs? Is the underlying platform IRAP assessed at the level our government client requires?

If those answers take more than a week to come back, you don't have a policy problem. You have an evidence problem.