Article

Sovereignty Is Now an AI Architecture Decision, Not Just a Question of Location

Data residency is no longer enough. Sovereign AI requires control over data, operations, and the technologies AI depends on.

Sumeet Arora
Sumeet Arora
October 20, 2026 6 min read

For years, sovereignty was a question of location. Where does the data sit? Which jurisdiction governs it?

Those questions still matter. They no longer cover the risk.

Sovereignty is also no longer only a question for nations. It’s a question for every company as well. Business sovereignty is an organization’s ability to keep strategic autonomy, operational resilience, and control over its critical data, technology, and governance, even when geopolitical, economic, or regulatory conditions shift around it. AI is where that ability is now being tested.

Data residency answers 1 question out of 3

Keeping data in-country or within corporate control is necessary, but it’s not sufficient. Data residency tells you where data lives. It doesn’t tell you who controls the environment around it or the technologies that depend on it.

AI exposes the gap even further. Models run somewhere. Agents interact with services, tools, and infrastructure somewhere. The moment those dependencies sit outside your control, location alone stops being a useful measure of sovereignty.

Sovereignty now has four dimensions: 

  • Infrastructure sovereignty is about control of the compute, storage, networking, and connectivity that support the environment. As reliance on the global internet is now increasingly questioned, organizations are seeking greater control over where systems operate and how knowledge flows across the internet.
  • Data sovereignty is about where data resides, how it’s collected, and how its use is governed. 
  • Digital sovereignty, including AI sovereignty, is about who controls the technologies, models, platforms, and services the business depends on. And it goes beyond models. It’s also about controlling how AI is operationalized using harnesses and agents. AI is both the observer and the actor on knowledge, and that purview itself needs governance and control.
  • Operational sovereignty is about who controls the infrastructure, data, AI, administrators, and processes that run the entire knowledge system. 

These are no longer separate concerns. An AI system is only as sovereign as its weakest dependency.

The consequence is straightforward. When architectures cannot satisfy sovereignty requirements, AI initiatives stall. Workloads move to isolated environments. Security and compliance teams are left approving systems they do not fully control.

Every company now has to decide what it’s willing to give up 

Businesses are being asked to solve a problem their current models weren’t built for. To get value from AI, you open it up to every employee. You connect it to your knowledge, your processes, and your workflows. Each of those steps hands something over.

Every question an employee asks and every interaction with an AI system is proprietary business knowledge. It shows how the company thinks, decides, and operates. Whoever sits between your people and the model sees all of it.

Choosing a model doesn’t settle this. The model is only one part of the environment. Business sovereignty depends on controlling the environment around it. 

Control has moved from where the data sits to who runs the work 

The way companies think about control has changed in stages: 

  • First, it was about location: Where does the data live, and which laws apply to it? 
  • Then, it was about operations: Who runs the infrastructure, and what happens when connectivity or a vendor relationship is disrupted?
  • Then, it was about the model: Which models do we use, and who controls access to them?
  • Now, it’s about the harness: Who controls how context is retrieved, how tools are orchestrated, how governance is enforced, and how cost is managed every time AI acts?

The harness is the execution layer around the model. It decides what the model sees, what it can do, what it’s allowed to do, and what it costs. That makes it the point where data, operational, and digital sovereignty meet, and the layer where a company’s knowledge is either protected or given away.

The conversation has moved beyond models, prompts, and context windows. The differentiator will be who controls the harness. Those decisions will shape long-term AI success more than the choice of model. 

Own the harness. Don’t rent it. 

The economics point the same way. Consider the results we see with Tera Harness, the execution engine behind Tera: 58% lower execution costs and 42% faster task completion. Those aren’t model improvements. They’re harness improvements.

This reframes the enterprise AI cost conversation from a model problem to an execution ownership problem. The token bill doesn’t drop because the model got smarter. It drops because someone owns the layer that decides what the model sees and when.

That is why we built Tera Harness around a simple principle: enterprises should own their harness, not rent it. Across leading coding, data engineering, and analytics benchmarks, Tera Harness matched or exceeded specialized AI tools while delivering significantly better economics.

Harness is about knowledge control as much as it is about cost and governance. A rented harness means your institutional knowledge flows through someone else’s execution layer. 

Control must follow AI to where it runs 

Teradata sovereign solutions are designed to help customers keep control across all three dimensions of sovereignty: infrastructure, data, operations, and digital systems. Rather than a single deployment model, Teradata provides a portfolio of sovereign deployment options that allow customers to align AI and analytics with their unique regulatory, security, and operational requirements.

Teradata Factory brings integrated hardware, software, analytics, and AI capabilities directly into customer-controlled, on-premises environments. With Teradata Factory, customers can build, deploy, and govern agents, models, and vectors alongside sensitive data while maintaining control over infrastructure, data access, model selection, and where AI inference occurs. This enables customers to operationalize AI within their own security boundaries without compromising sovereignty. 

Teradata Sovereign Cloud on Google Distributed Cloud Air-Gapped extends these capabilities to fully isolated cloud environments. Running without connectivity to Google Cloud or the public internet, it enables enterprise-scale analytics while maintaining strict control over data, operations, and access. Organizations can satisfy demanding regulatory and sovereignty requirements while benefiting from Teradata's high-performance analytics and AI capabilities in air-gapped deployments.   

Sovereignty doesn’t stop at the boundary of a single deployment. Organizations may need to operate across on-premises, sovereign cloud, and air-gapped environments. Teradata Fabric helps connect Teradata sovereign solutions while preserving governance and control. As AI becomes more distributed, operating across sovereign boundaries without creating new silos will become a requirement. 

Choosing a boundary shouldn’t mean building a new platform 

Enterprise architects know the pattern. On-premises, cloud, classified, and regulated environments each get their own architecture. The result is duplicated platforms, higher complexity, and strategic lock-in.

Teradata sovereign options change the starting point. The same enterprise analytics layer, with its workload management and governance, can be placed at the boundary the customer requires. The requirement decides the deployment model, not the other way around. 

Disconnected is a production requirement, not an edge case 

Consider a defense organization fusing cyber, geospatial, open-source, and operational intelligence feeds. Its network is isolated by design, with no public-internet dependency. Public-cloud analytics cannot operate there, so analysts work in special-purpose stacks cut off from the rest of the data program.

An air-gapped Teradata Sovereign Cloud environment on Google Distributed Cloud Air-Gapped changes that. The analytics engine runs inside the isolated boundary. Feeds are unified for governed analysis without exporting sensitive data.

The outcome is production-grade analytics at the point where decisions are made, and it keeps running when external connectivity is unavailable. Regulated financial services, healthcare, and critical infrastructure organizations face similar constraints wherever residency, operator control, or continuity requirements limit public-cloud use. 

The boundary is becoming part of the architecture 

Enterprise AI will be built and deployed inside the boundaries that nations, facilities, and networks require. The platforms that succeed will be those designed to operate wherever those boundaries exist, with the execution layer inside them.

The next question won't be whether AI can access the data. It will be who controls the data, the models, and the decisions that follow. Data residency defines where information resides. Sovereignty defines who remains in control when AI acts on it.

And for a business, that comes down to one question: who owns the execution layer?

Tags

About Sumeet Arora

Sumeet Arora is chief product officer at Teradata, leading engineering, product management, and innovation strategy. With deep expertise in analytics, AI, and cloud technology, he has a proven track record of building products that drive revenue growth. Previously, he was chief development officer at ThoughtSpot, leading its global engineering, product, and design teams. Prior to that, he served as SVP/GM of service provider networking at Cisco, overseeing its engineering and product management team. He serves on the board of CloudBees. View all posts by Sumeet Arora
Stay in the know

Subscribe to get weekly insights delivered to your inbox.



Teradata may send me marketing emails about products, data analytics, and events, which I can unsubscribe from at any time.

Your privacy is important. Your personal information will be collected, stored, and processed in accordance with the Teradata Global Privacy Statement.