IBM has introduced IBM Sovereign Core, a groundbreaking software foundation designed to embed digital sovereignty controls directly into the architecture of cloud-native and AI workloads. The launch responds to growing concerns over cross-border data access, operational control, and compliance amid escalating geopolitical tensions and increasingly stringent regulatory environments.
As digital sovereignty extends beyond simple data residency, it now encompasses control over infrastructure, software, identity and access management, encryption keys, auditability, and the jurisdiction where AI models are hosted and inference is conducted. IBM Sovereign Core aims to give enterprises, governments, and service providers sovereignty “as an inherent property of the software,” allowing them to operate within their own jurisdictional boundaries without relying on overlays or external controls.
The platform is built on Red Hat’s open source foundation and offers deployment flexibility across on-premises data centers, partner-managed infrastructure, and in-region cloud environments. Customers retain operational authority over deployment decisions, system configurations, identity management, and encryption keys, all within their chosen jurisdiction. The solution emphasizes a customer-operated control plane, providing ongoing telemetry and audit trails that support compliance and governance requirements while keeping artefacts within the designated borders.
IBM highlighted the importance of Sovereign Core for markets like ASEAN, where organizations face mounting pressure to scale AI initiatives while navigating complex regulatory and data sovereignty demands. Catherine Lian, IBM ASEAN General Manager, explained that the platform enables organizations to confidently pursue AI development with a balance of openness, agility, and sovereignty, helping accelerate trusted AI adoption in the region.
Industry analysts see the launch as addressing a critical gap in how organizations define sovereignty in AI. Sanjeev Mohan, principal at SanjMo, noted that Sovereign Core tackles the complex questions of system control and regulator accountability, emphasizing ongoing monitoring and assurance as AI moves into production. Erik Fish added that geopolitical considerations are increasingly influencing how governments and regulated industries manage critical data and infrastructure, making sovereignty controls more vital than ever in operational contexts.
IBM is offering deployment options including on-premises data centers, in-region cloud infrastructure, and collaborations with IT service providers. The company has already begun initial rollouts in Europe, partnering with Cegeka in Belgium and the Netherlands, and Computacenter in Germany. These partnerships focus on in-country operations and compliance management, enabling clients to meet local regulatory standards efficiently.
Gaetan Willems of Cegeka emphasized that Sovereign Core allows organizations to deploy enterprise-ready software aligned with local compliance standards, reducing the time and effort typically required for assembling and validating sovereignty controls. Christian Schreiner of Computacenter highlighted that the platform accelerates deployment timelines and broadens access to AI solutions for clients previously constrained by sovereignty concerns.
