How does sovereign support handle GDPR and PCI-DSS?

“Because the customer registry, ticket corpus and every model inference stay inside your boundary, identifiable customer data and any in-scope cardholder data are never transferred to a multi-tenant processor. This supports GDPR data-minimisation, lawful-basis and residency positions and keeps PCI-DSS scope under your direct control. Every automated action is sealed to a post-quantum Open Audit Record a regulator can inspect.”