Sovereign clouds promise local control of data, but can foreign governments still gain access through legal or regulatory pressure? We examine the evidence.