Control #

D

2

.

1

Define and maintain a list of approved regions for AI operations

Create and regularly update a list of approved regions for AI data storage, training, and inference. This list must be documented and referenced in system configurations.

Evidence

Documented list of approved geographic regions, available for customer inspection

Recommended actions

We'll recommend specific practices and actions for complying with this control.

Provide feedback on this control