Sovereignty is more than data location
Sovereignty is about more than where data is stored. It also encompasses legal jurisdiction, access and control, operational resilience, technical flexibility, and geopolitical considerations.
Sovereignty is not achieved simply by moving workloads to a European cloud provider. It goes beyond data location and requires organisations to consider legal, technical, operational, and geopolitical factors.
At Intercept, we therefore do not view sovereignty as a binary choice. We approach it as a risk-based discussion that balances sovereignty requirements against security, resilience, innovation, and business objectives.
Our position
At Intercept, we strongly support the protection of data, particularly sensitive and personal data. Individuals, organisations, and governments should be able to trust the cloud providers they depend on. Cloud technology should be adopted responsibly and securely, with the appropriate controls in place.
However, we do not believe that all data and workloads must move to European-owned cloud providers. Many organisations operate internationally and continue to depend on global technology platforms because of their security, resilience, scale, and pace of innovation. Despite sovereignty concerns, American technology remains integral to many organisations because of its technical and operational strengths.
For that reason, we continue to view Microsoft Azure as an excellent platform for many workloads. Azure offers scale, security, resilience, a broad range of managed services, and advanced AI capabilities that remain difficult for many European cloud providers to match. Microsoft's recent sovereignty investments also address several concerns around control, governance, and compliance.
The key lies in leveraging these technologies intelligently, ensuring operational models and data privacy measures align with regulatory expectations while balancing sovereignty requirements against resilience, flexibility, and cost.
What this means for customers
We encourage organisations to approach sovereignty as a risk-based discussion rather than an ideological one:
- For many customers, Azure, with the right governance, policies, and technical controls, will provide the right balance between compliance, security, resilience, and innovation.
- Others may require additional sovereignty measures, a hybrid approach involving European cloud providers or a stronger exit strategy.
Ultimately, the right approach depends on each customer’s specific risks, requirements, and operating context.
To minimise dependency and avoid vendor lock-in, organisations should adopt strategies that foster flexibility and portability across cloud environments. We see Kubernetes as the cloud runtime, enabling workloads to become more portable as sovereignty requirements change while preserving a consistent operational model across environments.
We do not believe there will be a single answer for every customer. Intercept will therefore neither prescribe a single cloud strategy nor select a preferred European cloud provider. We will follow the customer and assess, on a case-by-case basis, how and where we can best support their requirements.
Looking ahead
Digital sovereignty will continue to shape cloud strategies as regulations and geopolitical considerations evolve. But sovereignty is not a simple yes-or-no choice. It requires organisations to balance independence and control against resilience, security, innovation, operational complexity, and cost.
Our position remains clear: Azure-first, not Azure-only.
Microsoft also offers several capabilities that can help organisations address sovereignty requirements within Azure.