Geographic Distribution

Jurisdictional diversity is a first-class security property. Systems concentrated in a single legal jurisdiction are vulnerable to coordinated legal pressure, regardless of their technical properties.


Distribution Principles

Jurisdictional Independence

No single government should be able to compel disclosure or shutdown of the entire system through legal process.

Network Diversity

Geographic distribution should correspond to network topology diversity. Physical separation without network separation provides limited benefit.

Operational Feasibility

Locations must be operationally maintainable. Remote sites require either reliable local support or systems designed for minimal intervention.


Selection Criteria


Operational Reality

No jurisdiction is safe. Geographic distribution is a mitigation, not a solution. The goal is to increase the coordination cost for adversaries, not to achieve invulnerability.

Locations are not disclosed in detail. This document describes principles, not deployment specifics.