Pieza independiente

The sovereign cloud inside the perimeter

Movement 6 · The Territory — September 2026

I The word is doing too much work

On 8 September 2026 an operational-ontology company and a compute provider announced a sovereign intelligence stack. Models, data and computation inside the client's perimeter.

The offer answers a legitimate and old question: can I use a model without handing my data to whoever runs it?

A server placed inside a country is not sovereign if the key lives outside.

II The five layers the brochure runs together

Layer	The question	Who usually holds it
Data	where does it physically sit?	the client
Keys	who can decrypt?	the provider, unless agreed otherwise
Hardware	who built it and signs the boot?	a third country
Administration	who logs in at four in the morning?	remote support
Jurisdiction	which judge does the parent answer to?	another jurisdiction

All five can live in five different places; in practice they live in three, and none of the three is usually the client's [the client supplies the building and the invoice].

“A local building on top of foreign infrastructure is still foreign infrastructure.”

III June's dress rehearsal

Three months before that announcement something happened that is worth more than the announcement. The United States government applied temporary export controls to two frontier models. The lab suspended access for the affected customers until it could comply, and restored it when the controls were lifted.

For a few weeks a model behaved as what it fundamentally is: a dual-use good, subject to an export licence [like a machine tool or a sensor].

A model's sovereignty is not set by its licence agreement. It is set by the country that can forbid its shipment.

IV How to read an offer [safe]

Ask who generates and holds the keys, and ask to see it in writing.
Ask whether you can rotate them without the provider's involvement.
Ask who has remote administrative access, and from which country.
Ask what happens to your data if the parent company receives a foreign court order.
Ask what keeps running if the provider cuts service tomorrow.

If all five answers are in the contract, it is an offer. If they are in the sales deck, it is a word.

V Risks

Sovereignty sold as a product tends to resolve itself into geography, which is the easy part and the least important. Moving the disk to another country is cheap; moving the root of trust is not.

There is a risk in the other direction too. Demanding full autarky puts everyone out of the market, because nobody makes their own silicon, their own firmware and their own model. What is reachable is modular sovereignty: a substitution path for each layer and no single geopolitical point of failure [multi-cloud, multi-origin, your own keys].