Digital sovereignty calls for leaders who dare to choose

Digital sovereignty is still often approached as a defensive theme. The conversation quickly turns to geopolitics, cloud contracts, data location and access to critical systems. Yes, these are all important questions, but it’s not enough.

For executives, it ultimately comes down to control. Which dependencies do we consciously accept? Where do we want to retain freedom of choice? And in which situations should alternatives be considered?

These questions are becoming more urgent now that the digital core of organizations is connected to international platforms, global supply chains and rapidly evolving AI services. Absolute independence barely exists in modern IT. Digital sovereignty is therefore about conscious dependency — knowing where you are vulnerable, where you need freedom of choice, and which measures are proportionate.

This is the refreshing perspective that my team and I bring to the debate. Not ideological and not driven by fear, but as a governance issue: how do you organize control over data, cloud, AI, cybersecurity and operations? Sovereignty then becomes a design principle, not an end state.

This is sovereign by design.

Not maximum sovereignty, but conscious sovereignty

The debate regularly swings to extremes: everything European or everything American, open source or hyperscaler, full control or maximum speed. For executives, these are rarely useful choices. Reality calls for differentiation because not every process, dataset or application requires the same level of sovereignty. Hence executives need to ask:

• Which of my services are critical to continuity and value creation?
• Which data, models, and processes are true differentiators and crown jewels?
• Where is full control needed, and where do transparency, contractual safeguards and/or exit scenarios suffice?

This turns digital sovereignty from a technical dossier into a governance decision. The opportunity lies in the balance between control and innovation, risk reduction and agility, compliance and competitiveness.

For executive boards and supervisory boards, the topic therefore belongs alongside business continuity, cyber resilience, AI adoption and strategic sourcing. The right degree of sovereignty can certainly ensure the organization stays in control of its digital future.

Making the choice more urgent

Generative and agentic AI increase the need and urgency of better, smarter decisions and control. The closer AI gets to primary processes, customer interactions and decision-making, the more important questions become about data control, model selection, logging, security, explainability and accountability. Without control over data, access models, cloud architecture and governance, AI often remains stuck in safe experiments. With that control, AI can be applied reliably in critical processes.