Digital sovereignty, thought through

Designing Digital Sovereignty for a World That Won't Hold Still

Fri, 29 May 2026 00:00:00 +0000

Don’t solve your current sovereignty problem.

Three examples to make this concrete.

An organization fine-tuning AI models on European customer data finds the EU AI Act now requires those models and pipelines to live within EU jurisdiction. The training infrastructure built in 2023 wasn’t designed for that constraint. The remediation isn’t a configuration change; it’s an architecture rebuild.
A European enterprise places R&D and strategic plans in a US-headquartered cloud provider’s EU region. The data sits in Frankfurt or Dublin. The contract specifies EU jurisdiction. But the parent company can be compelled by its home government to provide access – and the enterprise has no visibility into whether, when, or how often that happens.
A sub-sea cable cut between mainland Europe and Scandinavia reroutes traffic through paths with significantly higher latency and reduced bandwidth. The infrastructure is still running. The DR strategy assumed those links would behave the way they did when it was designed. They don’t anymore.

Three different scenarios, three different surfaces – legal, access, operational. But the same underlying pattern: the conditions the architecture was designed for keep changing, and what was a solid solution at procurement quietly becomes tomorrow’s liability.

Why Sovereignty Is About Knowing Your Levers

Fri, 05 Jun 2026 00:00:00 +0000

Sovereignty is no longer just a privacy or data-residency question. It has become a question of strategic control, resilience, and competitiveness across the entire digital stack. The debate is not about decoupling. It is about understanding the levers that others hold over critical operations, and deciding deliberately which ones to accept, mitigate, or neutralize.

For CIOs and risk leaders, sovereignty decisions now shape uptime, legal exposure, cost trajectories, and time‑to‑market – not just compliance.

Control Isn't Sovereignty?

Fri, 12 Jun 2026 00:00:00 +0000

— or rather, what looks like control is often just ownership

April 2025. The Iberian peninsula loses power. Spain, Portugal, parts of southern France – one of the largest blackouts in European history. The grid is gone for hours in some regions, days in others.

When power goes out for long enough, diesel reserves run down. Standard reserves last 24 to 72 hours. Beyond that, every operator depends on resupply. And resupply, during a regional crisis, doesn’t happen on first-come-first-served terms.

Mind the Depth (of Sovereignty)

Fri, 19 Jun 2026 00:00:00 +0000

This is the second of two articles on a sovereignty paradox. The first, Control Isn’t Sovereignty?, argued that delegating to systems with broader resilience can produce more outcome sovereignty than direct ownership. This one is about the harder question underneath.

Most sovereignty design follows the same logic. To protect operations against grid failures: Install generators on site. Stock diesel reserves to keep them running through an extended outage. Arrange supply contracts with fuel suppliers for resupply during a crisis.

What 'SEAL-2' Doesn't Tell You

Wed, 01 Jul 2026 00:00:00 +0000

How do you measure whether something is sovereign?

Ask it about a real system and the question splits. Can you keep running if conditions turn, or does someone else decide when you stop? Who holds the levers – the access, the keys, the legal authority? And how deep does it go: your provider may be sovereign, but what about their suppliers three layers down?

These have different answers, and they don’t move together. A service can be operationally solid and legally exposed. Jurisdictionally clean at the top and dependent on a single foreign supplier underneath. “Is it sovereign?” has no single answer, because sovereignty was never a single property – which is exactly why you can’t put one number on it.

Sovereignty Doesn't Add Up

Tue, 07 Jul 2026 00:00:00 +0000

A cloud that passed the sovereignty test, storage that passed it, a model on top that passed it too. Each piece certified, so the sum must be too.

It isn’t necessarily. The sum may have parts no certificate covered – the pieces someone adds, the way they’re joined, the provider’s own dependencies, whoever operates the result. Any one of them can make the whole not sovereign. Sovereignty doesn’t add up from the parts.

Can Sovereignty Make You Less Resilient?

Fri, 17 Jul 2026 00:00:00 +0000

Sovereignty done right makes you resilient. But sovereignty you don’t operate is the opposite: a risk. You move a workload in-house to be more sovereign. Your jurisdiction, your rules, no outside provider in the loop. More control – which is the whole point.

But the provider you left wasn’t only running the service. They were also keeping it up, patching it, and making sure you could still reach it when something broke. You didn’t see that part, because you never had to.

Sovereign AI Has a Price

Tue, 28 Jul 2026 00:00:00 +0000

A chip maker’s engineers pasted proprietary source code and a confidential meeting transcript into a public AI assistant – three times in twenty days. They couldn’t take it back, and the terms at the time allowed the provider to train on it. The company banned the tools outright and started building its own.

That’s the first worry: what you send to a model leaves your building, and you can’t get it back. Confidentiality, IP, trade secrets – handed to a company in the business of learning from data.

Sovereignty Has Two Axes, Not One

Tue, 04 Aug 2026 00:00:00 +0000

A global company decides to become fully sovereign. Every system in its own data centers, in its own jurisdiction. Foreign providers out, cross-border transfers stopped, the estate air-gapped. Customer data untouchable, IP locked down.

Then it goes bankrupt. It was in the pizza delivery business, and the ordering platform was inside the air gap with everything else.

Of course nobody would do this. But notice what went wrong: not the ambition, not the execution. They applied it uniformly. The recipe and the order line got the same treatment, and only one of them needed it.

How This Site Is Actually Built

Mon, 01 Jan 0001 00:00:00 +0000

Article Zero will explain why this series exists. This one is the boring companion: how this site is put together.

If owning your work only matters when you can actually operate it, the operating part deserves its own page.

The short version: I kept talking myself out of the clever option. Every time, the simpler one was better.

What I assumed

I write on my MacBook Pro in plain Markdown and build the site with Hugo, which turns it into plain HTML with no database and nothing to rot. That part was never in question.

Why This Is Here (and Not Only on LinkedIn)

Mon, 01 Jan 0001 00:00:00 +0000

Almost everything I write, I publish on LinkedIn. That’s where the people I want to reach are. So why this plainer, quieter place too, with no feed, no audience to speak of? The answer is the thing I write about – and the way I’m built.

A short version of where it comes from. I’ve always loved to build. First Lego, then computers, then code. Then I discovered I could go faster by using what others had built – DLLs, then services. Until one day a provider switched off a feature my solution relied on, and the whole thing had to be rebuilt around the gap. Since then I’ve believed in backups, fallbacks and redundancy – what I’d now call sovereignty.