System and method for implementing data sovereignty safeguards in a distributed services network architecture

1. A system that enforces data sovereignty for users, comprising:

a set of nodes coupled via a computer network, each of the nodes implementing a set of services, a first service on a first node including a first interface accessible at a first network address for receiving a request for the first service from a user over the network; and

a data sovereignty module, the data sovereignty module:

identifying a data sovereign region for the user based on a user account record for the user, the user account record for the user including a region identifier for use in the identification of the data sovereign region for the user;

identifying one or more non-data sovereign regions or data sovereign regions associated with the first node on which the first service is implemented;

determining that the first node on which the first service is implemented is not data sovereign for the region identified for the user based on the one or more non-data sovereign regions or data sovereign regions associated with the first node and the identified data sovereign region for the user; and

when it is determined that the first node is not data sovereign for the region identified for the user:

determining a response to the request, and

returning the response to the user without implementing the request at the first service.

2. The system of claim 1 , wherein determining a response includes:

determining a second network address for a second interface of a second service based on the identified data sovereign region for the user, wherein the second service is implemented on a second node that is data sovereign for the data sovereign region identified for the user, and including the second network address in the response.

3. The system of claim 2 , wherein the response is determined based on response configuration associated with the first node or the second node.

4. The system of claim 1 , wherein identifying the one or more non-data sovereign regions or data sovereign regions associated with the first node on which the first service is implemented comprises accessing a data sovereignty configuration for the first node.

5. The system of claim 4 , wherein the data sovereignty configuration is replicated across each of the set of nodes.

6. The system of claim 1 , wherein identifying the data sovereign region for the user is based on a location identified based on the request.

7. The system of claim 6 , wherein the user account record for the user, including the region identifier, is updated based on the location.

8. A method for enforcing data sovereignty, comprising:

receiving a request for a first service from a user over a network at a first interface accessible at a first network address, wherein the first service is on a first node of a set of nodes coupled via a computer network, each of the nodes implementing a set of services;

identifying a data sovereign region for the user based on a user account record for the user, the user account record for the user including a region identifier for use in the identification of the data sovereign region for the user;

identifying one or more non-data sovereign regions or data sovereign regions associated with the first node on which the first service is implemented;

determining that the first node on which the first service is implemented is not data sovereign for the region identified for the user based on the one or more non-data sovereign regions or data sovereign regions associated with the first node and the identified data sovereign region for the user; and

when it is determined that the first node is not data sovereign for the region identified for the user:

determining a response to the request, and

returning the response to the user without implementing the request at the first service.

9. The method of claim 8 , wherein determining a response includes:

determining a second network address for a second interface of a second service based on the identified data sovereign region for the user, wherein the second service is implemented on a second node that is data sovereign for the data sovereign region identified for the user, and including the second network address in the response.

10. The method of claim 9 , wherein the response is determined based on response configuration associated with the first node or the second node.

11. The method of claim 8 , wherein identifying the one or more non-data sovereign regions or data sovereign regions associated with the first node on which the first service is implemented comprises accessing a data sovereignty configuration for the first node.

12. The method of claim 11 , wherein the data sovereignty configuration is replicated across each of the set of nodes.

13. The method of claim 8 , wherein identifying the data sovereign region for the user is based on a location identified based on the request.

14. The method of claim 13 , wherein the user account record for the user, including the region identifier, is updated based on the location.

15. A non-transitory computer readable medium comprising instructions for:

receiving a request for a first service from a user over a network at a first interface accessible at a first network address, wherein the first service is on a first node of a set of nodes coupled via a computer network, each of the nodes implementing a set of services;

identifying a data sovereign region for the user based on a user account record for the user, the user account record for the user including a region identifier for use in the identification of the data sovereign region for the user;

identifying one or more non-data sovereign regions or data sovereign regions associated with the first node on which the first service is implemented;

determining that the first node on which the first service is implemented is not data sovereign for the region identified for the user based on the one or more non-data sovereign regions or data sovereign regions associated with the first node and the identified data sovereign region for the user; and

when it is determined that the first node is not data sovereign for the region identified for the user:

determining a response to the request, and

returning the response to the user without implementing the request at the first service.

16. The non-transitory computer readable medium of claim 15 , wherein determining a response includes:

determining a second network address for a second interface of a second service based on the identified data sovereign region for the user, wherein the second service is implemented on a second node that is data sovereign for the data sovereign region identified for the user, and including the second network address in the response.

17. The method of claim 16 , wherein the response is determined based on response configuration associated with the first node or the second node.

18. The non-transitory computer readable medium of claim 15 , wherein identifying the one or more non-data sovereign regions or data sovereign regions associated with the first node on which the first service is implemented comprises accessing a data sovereignty configuration for the first node.

19. The non-transitory computer readable medium of claim 18 , wherein the data sovereignty configuration is replicated across each of the set of nodes.

20. The non-transitory computer readable medium of claim 15 , wherein identifying the data sovereign region for the user is based on a location identified based on the request.

21. The non-transitory computer readable medium of claim 20 , wherein the user account record for the user, including the region identifier, is updated based on the location.