Digital sovereignty in the AI era

Across Southeast Asia, every strategic decision, from adopting cloud architecture to artificial intelligence (AI) deployment, cannot be separated from decisions about control over data, technology, and operations. As shifting global dynamics, intricate regulations, and growing cyber threats reshape the region, digital sovereignty—the ability of an organization to move, leverage, and maintain control of its full technology estate—is moving from a compliance checkbox to the operating system of competitiveness.

This is evident in the Philippines, where digital transformation is accelerating across regulated sectors like banking, government, and health care. Organizations that prioritize digital sovereignty with a clear strategy in place, while pursuing aspirational innovation agendas, stand to gain the most, unlocking new opportunities while building a strong foundation for sustainable growth. In practice, that is both an opportunity and a challenge. An IBM Institute of Business Value (IBV) study of 1,000 global executives makes the challenge concrete: only 9 percent of Asia-Pacific executives surveyed say they fully understand their dependencies across AI vendors, models, and infrastructure—implying that most organizations are scaling AI faster than they can govern it.

Regulatory pressure is accelerating this reckoning, with Gartner expecting that nearly two-thirds of governments globally will introduce formal technological sovereignty requirements by 2028. However, if you can’t oversee your systems, you can’t control them. And without control, digital sovereignty is only an aspiration, not a reality. The cyber threat dimension further sharpens the urgency; Asia-Pacific was the second most attacked region globally according to the IBM X-Force Threat Intelligence Index, accounting for 27 percent of cyber incidents in 2025.

Building the sovereign foundation. True digital sovereignty rests on four interconnected pillars: data sovereignty: controlling where data is stored and who can access it; AI sovereignty: operating AI under your organization’s own authority and jurisdiction; operational sovereignty: maintaining control over strategic decisions while remaining accountable under local regulatory frameworks; and technology sovereignty: retaining the freedom to choose and move across technologies and providers as needs evolve. Together, these determine whether sovereignty is a provable operational reality.

Technology sovereignty and operational sovereignty are realized through the architectural choices that organizations make. Hybrid cloud infrastructure built with AI governance keeps sensitive data within jurisdictional boundaries, while applications and AI operate across environments, resolving the false trade-off between innovation speed and sovereign control.

Control as a competitive advantage. Digital sovereignty is not just about compliance, but also a commitment to provable, verifiable control, even when disruption occurs. It signals to the organization’s employees, customers, investors, and partners that it prioritizes safeguarding data and operating with integrity. Nineteen percent of consumers report losing trust in a brand due to data breaches or poor data protection, according to Gartner. The business case is equally compelling. According to the same IBV study: global organizations with advanced AI control capabilities protect 55 percent more operating profit from disruption, yet only 7 percent operate at this level, representing a widening gap between those building adaptable AI systems and those constrained by dependency.

With the sovereign cloud market projected to grow by 4.5 times to $169 billion by 2028, Philippine business leaders need to act now. Digital sovereignty must be a C-suite priority, anchored in hybrid-by-design infrastructure, AI-powered workflow reinvention, and governance frameworks enabling demonstrable control over data, AI, and operations. Data governance enables AI sovereignty, which in turn enables operational control, and finally ensures verifiable trust. The result is an organization that moves faster, innovates safely, and earns trust at scale beyond just compliance.

That is the standard that Southeast Asia’s most competitive organizations are already beginning to build toward, and you do not have to do it alone. IBM is committed to collaborating with Philippine enterprises and government institutions to turn digital sovereignty from aspiration into operational reality, through flexible technology platforms, built-in governance frameworks, and the expertise needed to ensure that digital independence compounds into long-term AI-driven growth.