# Sovereignty is decided below the model: what nations need to control > Sovereign AI debates focus on models and data. In practice, sovereignty is determined by jurisdiction, control, security and resilience at the infrastructure layer. A framework for governments and institutions. URL: https://www.qoreinfra.com/insights/sovereign-ai-what-nations-need-to-own/ Publisher: Qore Infrastructure Partners (https://www.qoreinfra.com) Author: Oliver Spring Published: 2026-10-25 --- Sovereign AI Sovereign AI debates focus on models and data. In practice, sovereignty is determined by jurisdiction, control, security and resilience at the infrastructure layer. A framework for governments and institutions. By **Oliver Spring**25 October 20266 min read ## Key points * The proposed Cloud and AI Development Act would set sovereignty levels for public-sector cloud, up to EU ownership and control. * {'Credible sovereignty requires four layers at the facility level': 'jurisdiction, control, security and resilience.'} * Many public programmes need a few controlled megawatts in months, not hyperscale campuses in years. In our work with ministries, public institutions and regulated enterprises across Europe and the Gulf, the same conclusion emerges in almost every engagement: sovereignty is decided further down the stack than most strategies assume. ## Policy has defined the levels The European Commission's proposed Cloud and AI Development Act gives the debate a structure. Its cloud sovereignty framework sets levels for providers serving the public sector, from a baseline, through EU-located personnel, infrastructure and assets with EU certification, to EU ownership and control and, at the strictest level, a high-assurance European cybersecurity certificate. Public tenders would weigh "Union added value" as a criterion. These levels are, in essence, statements about infrastructure: where it is, who owns it, who operates it and who can access it. ## Four layers at the facility level We assess sovereign facilities against four layers. All four are required. **Jurisdiction.** Land, owning entities and operating organisation located in Europe and subject to European law. This is the baseline commonly described as data residency. **Control.** A clear, documentable chain of ownership, operation and physical and logical access, including the legal regimes that could compel access. The higher sovereignty levels focus precisely here. **Security.** Security zoning, vetted supply chains and, for critical and defence-related missions, hardening against drones and electromagnetic threats. **Resilience.** The ability to operate through grid stress and supply disruption: behind-the-meter generation, storage, microgrid capability and redundant connectivity. ## Scale is often the wrong question A common assumption is that sovereign AI requires hyperscale campuses. National training programmes and the EU's AI gigafactories, each expected to operate within 18 months of contract signing, do. Many ministries, agencies and regulated enterprises, however, need a few megawatts under their own control, delivered in months. For them, factory-built modular capacity is frequently the right answer: installed on a public estate or a Qore facility, sized for current needs and expanded later. Qore Modular delivers in six to nine months on confirmed power, in four configurations. ## A neutral infrastructure partner Sovereign customers typically want to choose and own their compute, or to work with a European cloud provider. A neutral owner of land, power, building and fit-out, one that never owns the chip, preserves that choice. Combined with direct government engagement, proprietary access to power and industrialised delivery, it is how sovereign capacity can be delivered at the pace policy now demands. ## Sources 1. [The EU Cloud and AI Development Act in depth](https://www.insideglobaltech.com/2026/06/11/the-eu-cloud-and-ai-development-act-in-depth/), Inside Global Tech (Covington), June 2026 2. [Lagarde warns EU data centre gap could reach 19GW by 2036](https://datacentrereview.com/2026/09/lagarde-warns-eu-data-centre-gap-could-reach-19gw-by-2036/), Data Centre Review, September 2026 3. [EU launches AI gigafactories call to unlock more than €30 billion in investment](https://pulse2.com/eu-launches-ai-gigafactories-call-to-unlock-more-than-e30-billion-in-investment/), Pulse 2.0, August 2026 Figures are as reported by the sources above at the time of writing. This article is for general information only and does not constitute an offer, solicitation or investment, legal or tax advice. **Oliver Spring** Founder and Chief Executive Officer, Qore Infrastructure Partners. [Profile](https://www.qoreinfra.com/platform/leadership/#oliver-spring) ## Related * [Sovereign AI facilities](https://www.qoreinfra.com/products/sovereign-ai-facilities/) * [Governments and enterprise](https://www.qoreinfra.com/governments-and-enterprise/) * [Building Europe's Sovereign AI Infrastructure](https://www.qoreinfra.com/insights/building-europes-sovereign-ai-infrastructure/) [Contact the team](https://www.qoreinfra.com/contact/) Insights ## Further perspectives [Sovereign AI ### Building Europe's Sovereign AI Infrastructure Europe's AI ambitions will be decided by who controls the facilities, power and supply chains beneath the models. A perspective on what it will take, and how the platform is built to deliver it.](https://www.qoreinfra.com/insights/building-europes-sovereign-ai-infrastructure/)[Market ### Speed to power is now the decisive asset in European data centres With connection queues in Europe's traditional hubs at seven to ten years, the market's scarce input is no longer land or capital but confirmed power before 2030. Implications for origination, valuation and customers.](https://www.qoreinfra.com/insights/power-not-land-decides-europes-ai-map/)[Development ### Underwriting powered land: five tests of readiness Powered land has become a marketing term. For underwriting purposes it is a set of verifiable conditions. The framework we apply before any facility enters the platform.](https://www.qoreinfra.com/insights/what-makes-powered-land-ready/) --- About the publisher: Qore Infrastructure Partners (QIP) is Europe's power-ready hyperscale and AI data centre platform, headquartered in Zug, Switzerland: Building Europe's Sovereign AI Infrastructure. Website: https://www.qoreinfra.com. Not affiliated with Gcore, QORE Switzerland AG, QORE Global, QORE Finance or Qore (core banking). Nothing on this site is an offer of securities or investment advice.