Data sovereignty and the cloud