Sovereign AI

Sovereign AI Watch

Policy, Residency & Geopolitics

Sovereignty has hardened into procurement law, and the EU AI Act (Regulation (EU) 2026/1744) applies in stages rather than on a single deadline. The US CLOUD Act means EU residency alone no longer satisfies it — the bar has shifted to technical sovereignty.

Adopt hybrid sovereignty and route high-risk workloads to EU-native or air-gapped infrastructure. Full autarky is unattainable; managed, diversified dependency is the achievable goal.

<5%

Europe’s share of AI compute

US hyperscalers hold ~70–72% of regional cloud

96%

Actively adjusting for geopolitics

Of surveyed organisations

90%

US + China compute control

Treated as a strategic vulnerability

£1.1B

UK AI Hardware Plan

Plus £500M Sovereign AI Unit

€180M

EU sovereign cloud tender

To four European providers (Apr 2026)

~70%

Sovereign projects w/ foreign tech

4 of 5 partners are US companies

The Regulatory Clock

EU AI Act staged application

Obligations phase in over time: general application from 2 August 2026, Annex III high-risk systems from 2 December 2027, and Annex I high-risk systems from 2 August 2028.

2 Feb 2025

Prohibited AI practices & AI literacy obligations apply

2 Aug 2025

Governance rules & GPAI obligations apply

2 Aug 2026

General application of the AI Act (Regulation (EU) 2026/1744)

2 Dec 2027

Annex III high-risk obligations apply (biometrics, critical infrastructure)

2 Aug 2028

Annex I high-risk obligations apply (systems embedded in regulated products)

Concentration

Who controls AI compute

Global AI compute control

Approx. share · 90% sits with US & China

Sovereign AI national commitments

Headline pledged investment (US$B equivalent)

Survey · 96% adjusting

Geopolitics shaping deployment by region

Share of respondents citing each factor · UK vs. Europe vs. US (n=701).

Geopolitical factors influencing AI deployment

% of respondents

Analysis

The sovereignty stack

The US CLOUD Act can compel disclosure of data stored abroad by US-headquartered providers — so selecting an “EU region” is insufficient. Europe’s requirement has shifted to “technical sovereignty”: infrastructure, operational staff and legal jurisdiction all within the EU/EFTA. CADA introduces a four-level sovereignty assurance framework for public-sector procurement.

Turn these signals into a placement decision

Discuss power, location, cluster architecture and TCO with a CUDO AI infrastructure specialist.