Data sovereignty
Also known as: Onshore hosting, NZ hosting
Data sovereignty is the principle that data is subject to the laws of the country where it is stored and of the companies that hold it.
In full
Data sovereignty concerns which legal jurisdictions can reach a given dataset. It is more complicated than server location, because three jurisdictions can overlap: where the servers physically sit, the nationality of the cloud provider, and the nationality of the underlying infrastructure operator. New Zealand now has two hyperscale cloud regions on shore, Microsoft's New Zealand North since December 2024 and an AWS region since September 2025, alongside established New Zealand owned providers including Catalyst Cloud, Datacom, and SiteHost. Choosing a New Zealand data centre operated by an overseas-owned company does not by itself remove foreign legal reach.
Why it matters
For most private businesses there is no legal requirement to host in New Zealand. The genuine arguments are latency, roughly 28 milliseconds to Sydney against roughly 250 to Europe, and removing a category of cross-border privacy analysis rather than a legal barrier.
A common misconception
That New Zealand law requires local data storage. It does not, for the overwhelming majority of businesses. Public sector organisations follow a separate policy framework.