Digital Sovereignty
Executive Summary
Why discuss Digital Sovereignty now?
Digital sovereignty has moved beyond the scope of geopolitical debate and into the industrial decisions of enterprises and institutions. The increasing concentration of cloud services, the acceleration of artificial intelligence, the role of data, and the evolution of European regulations are redefining the relationship between innovation and control.
The central issue is not about owning technology, but rather the ability to govern what is strategic: data, infrastructure, skills, models, processes, and decision-making capabilities. In this scenario, sovereignty becomes a lever for resilience, competitiveness, and operational continuity.
The new question of choice
The progressive digitization of the economy has transformed the role of technology. Platforms, applications, and infrastructure no longer merely support the business—in many cases, they coincide with the business itself.
A supply chain vulnerability, a constraint imposed by an external jurisdiction, or the loss of control over data and platforms can generate impacts that extend far beyond the IT perimeter, affecting operations, reputation, compliance, and innovation capacity.
For this reason, digital sovereignty must be viewed as a core component of an organization's overall resilience.
Beyond data localization
Storing data within the European Union does not automatically mean exercising effective control over it. An organization can store data in Europe while continuing to depend on platforms, operational processes, or jurisdictions that limit its decision-making autonomy.
Sovereignty must therefore be analyzed as an overarching property of the entire digital ecosystem.
The 6 dimensions of Digital Sovereignty
- Legal: Which legal framework governs data, services, and infrastructure.
- Technological: Substitutability and portability of platforms.
- Data: Control over access, keys, lineage, and usage.
- Industrial: Skills, intellectual property, and innovation.
- Operational: Management, monitoring, and operational continuity.
- Cognitive: Governance of models, algorithms, agents, and decision-making processes.
From fragmentation to integration
Pragmatic Sovereignty: the right level for every context
This approach avoids two extremes:
- Unconscious dependency;
- Indiscriminate self-sufficiency.
Sovereignty thus becomes a strategy for managing dependencies rather than an attempt at technological isolation.
Level 1: European Data Localization
Suitable for standard processes and low-criticality workloads.
Level 2: Operational Independence and Supply Chain Transparency
For services requiring operational continuity and reduced dependencies.
Level 3: European Ownership and Control
For regulated organizations and critical services.
Level 4: Full Supply Chain Sovereignty
Reserved for contexts of maximum criticality, defense, and national security.
Factors to Evaluate:
- Data sensitivity;
- Operational continuity;
- Technological dependency;
- Relevance to critical infrastructure.
Governing Digital Sovereignty
DGS Sovereign Enabler
DGS supports public and private organizations in building sovereignty models consistent with their risk profile, business objectives, and relevant regulatory framework.
The value lies not in proposing a single sovereign platform, but in the ability to combine technologies, skills, governance, and security into an integrated and sustainable model.
Il contesto operativo
The 4 areas of expertise that make sovereignty concrete
1. Advisory: Perimeter and Governance
Translate regulatory requirements, business objectives, and risk levels into operating models, governance structures, and transformation roadmaps.
2. AI & Data | Physical AI: Sovereign Intelligence
Govern data, models, and agents throughout their entire lifecycle, ensuring control, traceability, and accountability.
3. Open Source: The Sovereign Stack
Build open, interoperable, and portable architectures through an ecosystem of industrial skills and capabilities. DGS is a co-founder of RIOS (Rete Italiana Open Source), which is a member of APELL (The European Open Source Software Business Association).
4. Cybersecurity: Perimeter Protection
Make control continuous, verifiable, and resilient through security, monitoring, and risk management.
Cosa significa nel concreto
AI, Physical AI, and Open Source: the new frontiers of Sovereignty
The issue of sovereignty today extends far beyond the cloud and data.
Artificial intelligence introduces new dependencies related to models, agents, and computational power. Physical AI extends control to the behavior of physical systems, infrastructure, and industrial processes. Open Source, on the other hand, represents a fundamental lever for increasing transparency, interoperability, and freedom of evolution.
The challenge lies in integrating these areas while maintaining control, security, and intervention capabilities.
Roadmap toward Digital Sovereignty
L'adozione di un'architettura multisito centralizzata permette di gestire diversi touchpoint digitali da un unico backend. Questa flessibilità consente al marketing di lanciare rapidamente nuove offerte commerciali e mini-siti dedicati, mantenendo una forte coerenza visiva e di brand, e semplificando la governance complessiva dei contenuti.
Assess Exposure and Dependencies
Map assets, data, platforms, and vendors, identify strategic workloads, and understand key areas of dependency.Design Governance and Controls
Define roles and responsibilities, establish decision-making criteria, and connect risk to business objectives.Protect Data, Identities, and Environments
Apply security controls, govern cloud workloads, AI, and infrastructure, and strengthen resilience and operational continuity.Monitor and Act
Introduce continuous monitoring, manage incidents and critical events, and maintain evidence and auditability.Maintain Resilience and Compliance
Update the model over time, verify portability and substitutability, and adapt to regulatory and technological evolution.
Expert perspectives
H3
Antonio Autorino, Head of AI & Data Sense, DGS
Michele Balbi, Advisor Digital Innovation Strategy
Giuseppe Blasi, Partner - Management Consulting, DGS
Pierluigi Brienza, Chief Strategy Officer, DGS
Gianluca Cimino, Chief Strategy & Delivery Officer Cybersecurity, DGS
Irene Cosimo, Content Marketing Leader, DGS
Francesco Di Bianco, Physical AI Offering Leader, DGS
Milena Fabbrizzi, AI & Data Sense Business Developer, DGS
Alessandro Favretto, AI - Service Line Manager, DGS
Eraldo Federici, Chief Operating Officer Digital Solutions, DGS
Roberta Giani, Chief Marketing & Communication Officer, DGS
Fabio Storri, Head of Management Consulting, DGS
Marco Tessarin, Head of Open Source Excellence Center, DGS
