Cloud adoption was once judged mainly by cost, speed and scalability. Enterprises moved workloads to cloud to improve agility, reduce infrastructure burden and accelerate digital transformation.

Those priorities are still important, but the enterprise environment has changed.

AI adoption, evolving regulation and geopolitical uncertainty have made cloud control a board-level issue. Leaders now need assurance that they know where their data resides, who operates their cloud environments, how AI systems are governed and whether they can continuously demonstrate compliance.

Control has moved beyond an operational concern and is becoming a strategic business capability that supports trust, resilience and sustainable innovation.

In conversations with clients, I keep hearing the same question: “How can we continue to leverage global cloud and AI innovation while retaining local control over our data, operations, AI systems and regulatory obligations?” That question captures the shift now shaping cloud strategy. Enterprises do not want to retreat from global innovation, but they do need greater control over how cloud and AI are governed, operated and evidenced across markets.

Gartner forecasts worldwide sovereign cloud infrastructure-as-a-service spending will reach $80 billion in 2026, a 35.6% increase from 2025. Gartner also says geopolitical tensions are pushing organizations outside the US and China to invest in sovereign cloud to gain greater digital and technological independence.

That demand reflects a wider shift: cloud control is becoming part of how enterprises manage risk, protect trust and maintain strategic flexibility.

Cloud strategy is becoming business strategy

AI depends on trusted data and governed infrastructure. At the same time, governments are strengthening regulations around data sovereignty, AI governance and operational resilience. Geopolitical developments are also highlighting the importance of digital independence and jurisdictional control.

The regulatory pressure is not only about data location. It is increasingly about whether organizations can prove that their digital operations are resilient, secure and governed across complex technology ecosystems. The EU’s Digital Operational Resilience Act (DORA) ensures that banks, insurance companies, investment firms and other financial entities can withstand, respond to and recover from ICT (Information and Communication Technology) disruptions, such as cyberattacks or system failures. The NIS2 Directive points in a similar direction by creating a unified legal framework to uphold cybersecurity across 18 critical sectors.

For enterprise cloud leaders, the implication is clear: control now means knowing who operates the environment, how privileged access is governed, how third-party dependencies are managed, how incidents are reported and whether the business can recover when disruption occurs.

These regulatory examples point to a wider enterprise requirement. Organizations need cloud strategies that balance innovation with governance, allowing them to modernize while maintaining control across data, AI and operations.

What sovereign-by-design means

Sovereign-by-design means embedding sovereignty into cloud architecture from the beginning, rather than applying compliance measures after systems have already been built.

In practice, this means integrating data residency, jurisdictional control, policy enforcement, security, identity management, AI governance and operational controls directly into the cloud operating model.

When compliance is added after deployment, organizations often create complexity:

• Controls may be fragmented across different platforms, teams and jurisdictions
• Evidence may need to be assembled manually
• Policies may be interpreted differently across hybrid and multicloud environments

A sovereign-by-design approach creates a stronger foundation by enabling continuous compliance rather than periodic remediation. It also gives enterprises greater confidence that cloud environments remain aligned with changing regulatory and business requirements.

Control enables innovation

Greater cloud control is not a brake on innovation. It is what allows innovation to scale responsibly.

Organizations with stronger governance frameworks can adopt AI more confidently, expand into regulated markets more quickly and respond to regulatory change without disrupting operations. They can also reduce compliance risk, strengthen cybersecurity, improve operational resilience and build greater trust with customers and regulators.

This is especially important as AI workloads become more business-critical. Enterprises need to understand where data is processed, where models run, who has access, how policies are enforced and how decisions can be reviewed. Without that visibility, innovation can create new risk. With the right controls, innovation becomes more scalable and sustainable.

Strategic cloud control creates the confidence required to modernize at pace while protecting the business. It allows organizations to use cloud, AI and data as engines of growth without losing sight of accountability, resilience and compliance.

Where leaders should start

CEOs, CIOs and risk leaders should start by asking whether they have continuous visibility and governance across their cloud environments, rather than simply asking whether they meet today’s compliance requirements.

They should assess where critical data resides, how AI models are governed, who has operational access, how policies are enforced across hybrid and multicloud environments and whether audit-ready evidence can be produced continuously.

They should also evaluate how quickly the organization can respond to regulatory changes, geopolitical disruption and evolving cyber threats without compromising business continuity.

The goal is to build a cloud strategy that delivers both innovation and strategic control. Enterprises need cloud environments that help them move faster, but also operate with confidence in a more regulated, AI-enabled and geopolitically complex world.

The next decade of cloud transformation will be defined by this balance. Cost, speed and scalability will remain important, but they will no longer be enough on their own.

The enterprises that gain the greatest advantage will be those that treat cloud control as a business capability that strengthens trust, reduces risk and creates the conditions for sustainable innovation.