Tenant and subject residency policies route primary data, indexes, logs, exports, and backups to adopter-defined regions, fail closed on disallowed destinations, and define migration and disaster-recovery behavior without asserting regulatory compliance.