Cloud security models face sovereignty test

Data sovereignty has shifted from a compliance checkbox to a core infrastructure and security strategy issue as cloud adoption, geopolitics, and AI workloads collide, according to Forbes.

Regulations such as GDPR, NIS2, and DORA are now being enforced more aggressively, while governments scrutinize foreign cloud providers, forcing enterprises to rethink what "in-country" data control truly means. Storing information locally is no longer sufficient if access routes or security layers operate under other jurisdictions. Many architectures rely on cloud-delivered Security Services Edge for outbound traffic and legacy on-premises controls for inbound flows, creating gaps that undermine sovereignty objectives.

The rise of localized AI workloads and agentic systems further complicates the model, generating multidirectional traffic that traditional SASE designs were not built to secure. Sensitive retail, banking, and industrial data increasingly requires localized processing, limiting reliance on public cloud AI tools. Versa Networks is addressing the issue with Sovereign SASE-as-a-Service, delivered via global carrier partners to provide managed, jurisdiction-specific security environments without third-party cloud exposure.