After Civo Navigate London

Yesterday I spent the day at Civo Navigate London, at Convene on Bishopsgate, where the theme was sovereign AI built for a hybrid and multi-cloud era. Three topics kept coming back in every session, over coffee and through the evening networking: AI sovereignty, data sovereignty and AI oversight.

Sovereignty as a Question of Control

The 1:30pm panel was the session I kept thinking about on the way home. The discussion moved sovereignty away from being a hosting checkbox and treated it as a question of control, covering who can reach your data, which laws apply to it, and who is accountable when an AI system acts on it.

One slide during the day made the point very clearly. It mapped data residency laws spreading from the EU and UK to India, Saudi Arabia, Indonesia, Brazil and beyond, and it noted that the US CLOUD Act (2018) allows US authorities to compel a US-headquartered cloud provider to hand over data even when that data is stored in another country. Any organisation that assumes data stored in the UK is also governed only by UK law should take that seriously.

Three Themes Worth Taking Back to the Board

Sovereignty now shapes architecture. It decides where your models run, who operates the infrastructure and which jurisdictions your data can be pulled into, so it belongs in the design stage rather than being left for procurement to resolve at the end.

AI oversight is becoming the central issue. As agentic AI moves into production, boards will need to show where humans sit in the loop and how an automated decision can be traced, which is the same evidence discipline we already expect from financial and ESG reporting.

Sustainability and sovereignty are converging. The location of a data centre determines both whose law applies and what energy mix powers your AI workloads. Organisations that govern those two questions together will be far better placed when regulators, investors and customers begin asking about both at once.

Where your data lives now decides whose law applies to it and whose energy powers it, and both of those are governance questions.

A Conversation with Civo

A special thank you to Mark Boost, CEO of Civo, for a valuable conversation on sovereign data infrastructure and sustainable data centres, and for his interest in the recent work we have completed at ESG Disclose in both areas. It was encouraging to find so much common ground on how compute, compliance and carbon now connect.

Sovereign AI is only as trustworthy as the governance around it. Knowing where your data sits is the starting point, and being able to prove who controls it, who oversees the systems using it and what it costs the planet to run them is the part boards will increasingly be asked to evidence.

Thank you to the whole Civo team for a well-run and thought-provoking day, and to everyone who shared their perspective between sessions.