Geographic Distribution
Jurisdictional diversity is a first-class security property. Systems concentrated in a single legal jurisdiction are vulnerable to coordinated legal pressure, regardless of their technical properties.
Distribution Principles
Jurisdictional Independence
No single government should be able to compel disclosure or shutdown of the entire system through legal process.
Network Diversity
Geographic distribution should correspond to network topology diversity. Physical separation without network separation provides limited benefit.
Operational Feasibility
Locations must be operationally maintainable. Remote sites require either reliable local support or systems designed for minimal intervention.
Selection Criteria
- Legal framework regarding data requests and surveillance
- Network connectivity and peering options
- Physical security and access control
- Energy availability and stability
- Political stability and rule of law
- Mutual legal assistance treaty status
Operational Reality
No jurisdiction is safe. Geographic distribution is a mitigation, not a solution. The goal is to increase the coordination cost for adversaries, not to achieve invulnerability.
Locations are not disclosed in detail. This document describes principles, not deployment specifics.