Jurisdictional Exposure Register

Residency is not jurisdiction.

Where a provider hosts data is a contractual choice. Where a provider can be legally compelled to surrender it is fixed by incorporation and ownership. This register maps the gap across the technology stack an APRA regulated institution actually runs, from hyperscalers and core banking to payments, identity, data, security and the AI providers, and keeps each row current as the legal ground moves.