What sits in the UAE North data plane

Where your AI data is allowed to sit covers what Regulation 10 and the DPL require. This entry covers what regulation10.ae actually does about it, which is stricter than the regulatory minimum: Reg 10 does not itself require UAE residency, but every DPIA, notice, audit trail, evidence pack and register entry regulation10.ae produces sits at rest in Azure UAE North.

• All Reg 10 regulated data is pinned to UAE-resident storage.
• The audit trail is held in UAE North and is sealed and tamper-evident: each record is fingerprinted when it is saved, so any later change would be detected.
• Cross-border access runs only via DIFC Standard Contractual Clauses, with a Transfer Impact Assessment on file.

Inference is a separate question from storage. The judgement deployment is provisioned in UAE North, but the Azure OpenAI deployment type it uses is documented as processable in any Azure region, so regulation10.ae states where the deployment sits and claims nothing about where any single request executes. See /security for the full inference-by-stage breakdown. In-country compute is not the same legal status as DIFC adequacy, and regulation10.ae does not market UAE North as DIFC-adequate.