The practice of limiting data access to certain geographical regions. A device’s location must be within a company area.