6.5 Module 6 · Data Sovereignty & Approved Providers

AUKUS, Five Eyes & Cross-Border Data

When international arrangements intersect with AI, the rules change. Navigate AUKUS Pillar II, ITAR/EAR controls, and Five Eyes considerations for AI use in defence and industry.

Cross-Border Decision Tree AUKUS Applicability Checker

Cross-Border Decision Tree

Work through the decision tree to determine the right AI approach for your data. Start by selecting the type of data you are working with.

What type of data are you working with?

Unclassified / OFFICIAL
Public information at OFFICIAL level
OFFICIAL + Defence Capability
Defence capability or procurement
OFFICIAL: Sensitive or Above
Higher classification levels
Five Eyes / International
Shared under international arrangements

AUKUS Applicability Checker

Answer these five questions to determine whether AUKUS restrictions apply to your work. If in doubt on any question, select "Not Sure" — that is the safest response.

Critical Warning

AUKUS material is NEVER appropriate for public AI tools, regardless of classification level. The international sensitivity of AUKUS programs means even OFFICIAL-level AUKUS information requires separate handling. When in doubt, ask your security officer.

Key Insight

The safest assumption: if it touches AUKUS, Five Eyes, or any international arrangement, it does not go into public AI. Full stop. There is no shortcut, no workaround, and no "approved provider" exception for internationally controlled material.