Public-sector cloud: procurement and data sovereignty
Public sector
What does the sovereignty requirement look like on paper? It is a table, not a badge. For each data category, the file names the cloud region that may hold it, the defined local path where it must stay, the people who may administer it and the evidence an audit receives. A "sovereign" label without that table is not a control.
Can content stay inside a defined path? Yes, when the path is designed in from the start. On the Bangladesh Television (BTV) engagement, sovereignty was scoped to the content path: streaming through BlessBit with a private CDN footprint, a petabyte-scale archive under lifecycle rules, and 24×7 managed operations. The claim is scoped to content. It is not a claim that every dataset is local.
Which laws and standards should a procurement file check? The file should list the data-protection and cross-border transfer rules that apply to the body, as applicable in your jurisdiction, and name the person who confirms them. We supply the architecture evidence that counsel needs; we do not determine which rules bind your body.
What do we hold, and what is readiness only? We hold ISO 9001:2015 (certificate 25/182622) and ISO/IEC 27001:2022 (certificate 25/18024), both issued by A Cube TIC Limited and expiring 7 and 6 October 2028. SOC 2 and PCI DSS are readiness work. We state that in every file we send.
How is the work delivered and paid for? Engagements are quoted in USD, with other currencies available by contract. Operations minutes are written into the contract. Taxes apply as applicable in your jurisdiction and the contract.
- Sovereignty: a per-category data-location table, written before cutover.
- Operations: 24×7 managed operations for in-scope infrastructure, with minutes in the contract.
- Frames: data-protection and cross-border transfer rules, as applicable in your jurisdiction, confirmed by your counsel.
The industry map row for this sector
| Industry | Architecture pattern | Data-location stance | Published case study |
|---|---|---|---|
| Public sector | Landing zone, identity, logging, local CDN for content that must stay | Written per data category before cutover | Public broadcaster (BTV); Korean references GSpider (Korean Army), Busan Metro |
Case studies name their clients. The public-sector clients are Bangladesh Television (BTV), GSpider (Korean Army) and Busan Metro; KEPCO KDN is an energy-sector IoT reference.
Frequently asked questions
Can public bodies use TiCON's cloud?
Yes, with a per-category data-location split, a landing zone, identity without shared logins, logging and a local CDN path where content must stay. The published public case is the Bangladesh Television engagement.
Which public-sector clients can you name?
Bangladesh Television (BTV), GSpider (Korean Army) for sensor data and alarm visualization, and Busan Metro for smart data on a metro operator carrying about 1.5 million passengers a day. Reported efficiency gains at Busan Metro are 15 to 30 percent.
Is my data kept inside required boundaries?
Where a category must stay in-country, we design a hybrid or local path and document it. Where it may run in a named region, we state the region. Your counsel confirms the requirements that bind your body.
Do you have Azure for ministries?
We are an Azure delivery partner for architecture, migration and operations. We do not claim a Microsoft Solutions Partner designation.
Related services
This page is not legal advice. Confirm the requirements that apply to your body, as applicable in your jurisdiction, with your counsel and procurement team.