Read summarized version with
About project
Working time:
Since 2025
Industry:
Benefits software
The service:
Managed Services
Overview
The customer is a Canadian benefits administration software provider for which Dedicatted built a data residency landing zone on AWS. After go-live, the company asked Dedicatted to run the environment and keep residency provable between contract reviews.
The Challenge
Residency was designed in at go-live. The risk was losing it gradually afterwards.
1. New Services, New Paths
Product teams adopting new AWS services could create data paths outside the design.
2. Drift Between Reviews
Guardrail or logging changes could go unnoticed until the next audit.
3. Evidence on Deadline
Public-sector contract reviews arrived with short deadlines.
4. Operator Access Questions
Clients asked who could access their data, and from where.
Technology & Approach
We run the environment around the clock and treat residency as an operating metric, checked every month like availability or cost.
Implementation
Sovereignty Onboarding
Recorded the residency evidence baseline, confirmed Region-deny guardrails, in-Region keys and log and backup destinations, and agreed an operator access model with every action logged.
Monthly Operations
Our engineers respond to incidents around the clock, patch and maintain, and review guardrail drift and new service use against the residency design, fixing deviations after approval.
Residency Reporting
A monthly residency report shows where data, keys, logs and backups are held, with any exceptions and their owners.
Quarterly Evidence Pack
A quarterly pack supports privacy, audit and procurement reviews.
Customization & Client Adaptation
The service is shaped around the questions privacy officers and buyers ask.
New Services Reviewed First
Requests to use a new AWS service are checked against the residency design before it is enabled.
Operator Access in Writing
The access model, including where operators are located, is documented and approved by the customer’s privacy officer.
Evidence from the Record
Reports are generated from AWS Config and AWS CloudTrail data, not assembled by hand.
Recovery Inside Canada
Backup restores are tested in the Canada West (Calgary) Region.
If you find this case interesting, we recommend taking a closer look at
The Results
Residency is now checked every month instead of once at go-live, and the provider answers procurement and audit requests from the quarterly evidence pack instead of from scratch.
Long-Term Value
- Residency that holds as the platform evolves.
- Evidence ready for every contract review.
- An approved, documented operator access model.
Business Impact
- Faster public-sector procurement responses.
- Drift found and fixed between audits.
- Clients reassured about who can access their data.
