Skip to content
How to read this site
BLACK VAULT™
← All articles

Regulation

What sovereign compute means

'Sovereign' has become the most used word in European AI. Most uses of it do not survive one question: who can walk into the building? This article is our working definition – the one our own pages are held to.

What sovereign compute meansRegulation

Jurisdiction, ownership, and the difference between a region on a cloud map and a building with an address.

A region is not a place

A cloud region is a marketing name for infrastructure you cannot locate, visit or audit. Jurisdiction, by contrast, attaches to physical things: a building, its owner, its operator. Whoever cannot point at the building can only take sovereignty on trust.

Three layers, one test

Data sovereignty asks which law governs the bits. Operational sovereignty asks who holds the keys and can be compelled to use them. Economic sovereignty asks who owns the asset and keeps the value. A workload is sovereign when all three land in the same jurisdiction – any one layer abroad, and the other two are conditional.

The law follows the operator

Under the US CLOUD Act, a provider under American jurisdiction can be ordered to hand over data it controls regardless of where the servers stand. That is not a scandal, it is simply their law working as written – but it means that renting European floor space from a non-European operator moves the building without moving the data.

The address test

Our definition is deliberately physical: a named German building at a street address, owned by a German project company, operated under German and EU law. Which law applies is settled by geography rather than by contract – and an authority auditing the workload can stand in front of the rack it concerns.

Why this matters now

Germany and the EU are putting public money behind exactly this kind of infrastructure – the German data centre strategy and the EU's AI investment programmes both treat domestic compute as a strategic asset. The policy tailwind is real; the buildings it needs mostly do not exist yet. That gap is our business.

Sources

  1. 01US CLOUD Act, full text – congress.gov
  2. 02GDPR, consolidated text – EUR-Lex
  3. 03German Federal Government: data centre strategy for Germany (2026)

Where else to go.

The rest of the site, including the parts a diligence reader wants and the parts the law requires.

A squared stack of pale paper on a dark ground, one brass clip on the top sheetDocumentsOpen
A brass embossing seal resting on a single sheet of pale paperPressOpen
A dark card-index drawer pulled open, cream cards standing in it, a brass handleKnowledgeOpen
Twelve small dark cubes in a grid, one of them brassCompanyOpen
A dark stone resting in black sand, concentric rings spreading from it, the innermost ring brassImpactOpen
A dark unsealed envelope lying flat, a thin line of brass at its edgeContactOpen
A bound ledger lying open, dark cover, cream pagesImprintOpen
A matte black document folder, closed, with one small brass claspPrivacyOpen