Specifies where data is physically stored and processed, often driven by compliance, latency, or policy requirements, ensuring that sensitive information remains within approved geographic boundaries.