Sovereign data centre enclave design
DSarchitek Inc. designs separated data centre enclaves for sensitive government work, and the phased path to certifying them against federal security standards.
What an enclave is for
Some government work cannot share infrastructure with anyone: sensitive personal records, security and defence workloads, and the AI systems trained on them. An enclave is a separated part of a data centre, with its own physical, network and personnel controls, built to hold that work. Demand for enclaves is growing as governments bring AI into services that handle protected information.
What the practice does
- Enclave designs that set out the physical, network, personnel and governance controls for each level of sensitivity.
- Certification roadmaps that map federal security standards, including ITSG-33 and the Protected B, Medium Integrity, Medium Availability (PBMM) profile, TEMPEST, COMSEC and the Canadian Program for Cyber Security Certification, into phases.
- Enterprise risk frameworks and launch gap registers for facilities that are not yet operating.
- Governance and operating organisation designs, including for Indigenous-led facilities that must keep control as they grow.
A phased roadmap lets a facility take on more sensitive workloads as each phase is met, rather than waiting for every certification before it can serve anyone.
Work behind it
For the board of an Indigenous majority-owned sovereign AI data centre and energy program, the practice has produced more than 40 documents, including an enterprise risk framework covering 14 top-level risks, a launch gap register of 27 items, and a four-phase certification roadmap that maps more than 25 federal security standards. See also sovereign cloud and data strategy.