Glossary
Data Residency
Data residency concerns where data is physically stored and processed, and adds a geographic dimension to authorization decisions on top of the ordinary questions of who a requester is and what they're permitted to do. A request might be otherwise fully authorized by identity and role, and still need to be denied or rerouted because of where the data resides or where the request is coming from.
This adds a layer of complexity access-control systems don't always account for by default: policy has to reason not just about identity and role but about location, and infrastructure has to actually enforce that data doesn't move or get accessed outside the boundaries the policy specifies — a requirement that touches storage and routing decisions, not just the authorization check itself.