The New Zealand position
What New Zealand holds, layer by layer, what is actually on offer here, and the questions to ask anyone selling sovereignty. Dated September 2026.
Everything on this page is dated September 2026.
What is actually on offer
Two products are sold under the sovereignty label in New Zealand today.
A stronger tenancy. “Sovereign cloud” arrangements: a closed model such as Claude or GPT-5, run inside walls built for one government or sector. The walls are real. They can include promises about where data is stored, contract terms a government negotiates rather than accepts, rights to audit, sometimes computers reserved for that customer alone. The model inside the walls remains the vendor’s property throughout, on the vendor’s terms. In the four meanings this buys a measure of data sovereignty and a measure of operational sovereignty.
Owned weights behind the frontier. An AI model is, in the end, one enormous file of numbers, which the industry calls the weights. Some laboratories publish that file for anyone to download. Downloaded and run on computers you control, the model sits under New Zealand law for as long as you choose to keep it. The file cannot be recalled, repriced or withdrawn. As at September 2026 the most capable published weights come from Chinese laboratories. DeepSeek publishes its flagship models under the MIT licence, which permits commercial use. Alibaba’s Qwen family is substantially Apache 2.0, another permissive licence, with a custom licence on the largest variant. Their capability trails the best closed models by months. This buys model sovereignty and operational sovereignty, at the price of that gap.
The Auckland region
AWS opened a data centre region in Auckland on 1 September 2025. Its Amazon Bedrock service, which supplies AI models to businesses, followed there in March 2026, with Claude among the available models. One detail matters for sovereignty. Under a feature called cross-region inference, the request goes to whichever data centre has capacity, and a setting chosen by the buyer decides how far it may travel.
On the Asia Pacific setting, a request made in Auckland is handled in Auckland, Sydney or Melbourne. On the global setting, Amazon may send it to any of its commercial regions worldwide, the United States included. The global setting costs about 10 per cent less, so the cheaper option is the one that carries your request furthest from here. Your stored data stays in Auckland on either setting.
Ask which setting your arrangement uses, and get the answer in writing. A request processed in the United States brings the CLOUD Act back into play.
For a New Zealand organisation this is the closest a top-tier model currently gets: a service you connect to in Auckland, computation that can run offshore, an American provider’s terms over the whole arrangement.
What New Zealand holds, layer by layer
| Layer | The position in September 2026 |
|---|---|
| 1 · The law | New Zealand courts and privacy law govern local actors. The US CLOUD Act still reaches US providers, wherever the server sits. |
| 2 · The processing | Bedrock endpoints in Auckland. The computation can run in Australia, or anywhere in the world on the global setting. |
| 3 · The contract | A choice among foreign vendors’ terms. |
| 4 · The weights | Open weights can be downloaded, held and run here. This layer is genuinely available to any New Zealand organisation with the hardware. |
| 5 · The training data | New Zealand’s own corpora, including te reo Māori, and one working example of the layer held: Te Hiku Media. |
| 6 · The compute | Data centres for hosting. No leading-edge chip fabrication. No frontier-scale training capacity. |
| 7 · The people | A small research community. The frontier laboratories are offshore. |
| 8 · The frontier | No New Zealand laboratory operates at the frontier. |
The fifth row has its own page: Māori data sovereignty.
The questions to ask
Anyone selling sovereignty should be able to answer these.
- Which of the four sovereignties does this buy: data, operational, model or capability?
- Where does the computation happen? Which inference setting does this use, and can it leave the region? Where is our data stored?
- Whose courts can order our data handed over, and under which country’s law?
- If the vendor repriced, restricted or withdrew the model tomorrow, what would we still hold?
- Which model version does the arrangement name? What happens when it is superseded?
A vendor with good answers will give them quickly. Write the answers into the contract.
Sources. Each carries a live link and a dated Perma.cc record.
- CLOUD Act, 18 U.S.C. § 2713 (2018), govinfo.gov — record
- AWS News Blog, 1 September 2025, the Auckland region — record
- AWS Machine Learning Blog, 26 March 2026, Bedrock in New Zealand — record
- AWS, cross-Region inference, geographic and global profiles — record
- DeepSeek-V4-Pro licence, Hugging Face — record
- Qwen3-235B-A22B licence, Hugging Face — record
- Qwen3.8-2.4T-A95B licence, Hugging Face — record
- Anthropic, Claude Mythos, Mythos 5.1 released 1 September 2026 — record
All checked and captured 23 September 2026.