A data-residency badge tells you where your bytes sit. It says nothing about who can actually compel them. For anyone keeping data under GDPR, the AI layer is where it gets hard: the models you can reach and trust are fewer than the marketing suggests, and the field is consolidating away.
