Insights
from the
field.

Every time a Kiwi business signs up to another US SaaS, a little more of our data, our IP and our leverage leaves the country. It's not dramatic. It's just paperwork, terms of service, defaults. But it compounds.

Digital sovereignty isn't nationalism. It's the boring, structural question of who your data answers to when things go sideways, a subpoena, an outage, a price hike, a change of ownership. Under the Privacy Act 2020 the accountability stays with you regardless.

The counter-move isn't to unplug from the world. It's to run the sensitive core on hardware you control in Aotearoa, then let the AI models query the public surface. That's the 10NZ.X stack, and it's why we bother.

The brief was simple: the server was slow, the licences were expensive, and the vendor kept pushing another upgrade. We looked at what the box actually did, file share, a couple of internal apps, backups, and it didn't need Windows Server at all.

One weekend later it's running Debian on Proxmox, the internal apps live in Docker, backups run to a second node over Tailscale. The client's monthly bill dropped, the box is quieter, and patch Tuesday isn't a scheduled outage anymore.

The lesson isn't 'Linux good, Windows bad'. It's that most SMB infrastructure was sized and licensed for a problem that no longer exists. Audit what the machine actually does. Nine times out of ten it wants to be smaller, cheaper and yours.

Ten years ago the fight was for page one of Google. Five years ago it was for the map pack. Right now it's for the answer, the single line a model returns when someone asks it who to trust.

That answer is assembled from schema, citations, entity signals and whether your site will even let an AI crawler in. Most NZ businesses fail on the last one before the model ever sees them.

Fix the plumbing, then earn the citation. That's the whole game.

People used to Google "commercial lawyer Auckland" and scroll ten blue links. Now they ask ChatGPT, "who should I use?", and the AI answers with a name and a reason.

Agent Engine Optimization is the work of making sure that name is yours. We measure how visible and accurate your business is inside the big models, fix the technical and content gaps that keep you invisible, and prove the change with numbers every month.

Grades: A 80,100 Agent-Ready · B 60,79 Mostly Ready · C 40,59 Needs Work · D 0,39 Not Ready. Most NZ businesses start in the 40s or 50s. That's normal, it's also the opportunity.

Under the Privacy Act 2020, you're accountable for your data wherever it goes. Every offshore API is a chain of terms of service you've never read written by lawyers in a jurisdiction you don't operate in.

Sovereign infrastructure means the server answers to NZ law and to you, not to a US cloud provider's TOS. For legal, health and financial firms that's not marketing. That's compliance.

10NZ.X processes and stores everything on hardware we own, physically in Auckland. The only thing that ever touches the AI companies is the public question we ask them, never your internals.

We've now run the agent-readiness scan across dozens of NZ sites, law firms, trades, clinics, PV installers, e-commerce. The pattern is brutal and consistent: most land between 20 and 35 out of 100. Level 1, Basic Web Presence.

It's almost never the site's fault. WordPress defaults ship a robots.txt that blocks half the useful paths, no sitemap directive, no LegalService or LocalBusiness schema, no AI crawler rules, no MCP surface, no OAuth discovery, no Agent Skills. The AI models literally cannot see who you are or what you do.

The fix isn't a rebuild. It's a 40-point remediation pass, roughly a week of work, that lifts a typical site from the mid-20s into the 60s. That's the difference between being invisible to ChatGPT and being the answer.