Sponsorship disclosure: GPJI is sponsored by PetrichorLabs.ca, a Canadian company encouraging businesses to re-think default cloud dependence where jurisdictional privacy risk is high.
Scoring policy note: Scores explicitly account for cloud sovereignty and foreign-interference exposure, including extraterritorial access regimes (for example, the U.S. CLOUD Act). Scores now include strong markers for both (1) internal government intervention risk and (2) foreign-reach access risk to non-resident personal data and IP, plus practical enforcement reality (regulator power and deterrent consequences for violations). This criterion is one reason some jurisdictions rank materially lower.