Page 64 - Red Hat PR REPORT - AUGUST 2025

8/8/25, 10:48 AM Digital Sovereignty is far more than compliance | Web Release
across environments, helping businesses avoid lock-in to a single vendor’s ecosystem, and providing customers with the
flexibility, privacy and portability required to adapt to future regulations and sovereign requirements. In addition to this,

specific technologies such as Confidential Computing can help you to continue using your current investments in cloud
technologies while protecting your data from third party operations. Open source software, being a neutral decentralised

way to develop software, delivers access and transparency while not relying on a single vendor, instead leaning on the
decentralised community as the real back up.

Next, organisations must control their exit strategy, for a smooth migration of data and applications if vendors change

policies or face geopolitical restrictions. Lastly, they should invest in community-driven resilience that can provide an
additional safety net. The CVE database, a cornerstone of global cybersecurity, nearly collapsed after US funding cuts

but was saved by international collaboration, demonstrating the need for decentralised solutions and also the need to be
able to keep innovating while protecting global collaboration and contributions. Innovating is costly and if you are only
a consumer you may miss important advances and security.

While digital autonomy is needed, we also must protect global collaboration and innovation with open source

communities at its centre. Open source provides transparency and control of code while at the same time accelerating
innovation, making it a key strategic investment for local/sovereign talent development.

Organisations cannot afford to take a wait-and-see approach when it comes to establishing their digital future.

Sovereignty laws will evolve, but resilience is permanent. Digital sovereignty isn’t just a regulatory obligation, it’s a
strategic imperative for survival. The ATB and UniSuper cases showcase that legal compliance alone is insufficient, and

that true autonomy requires technical resilience and independence from vendor lock-in.

https://web-release.com/digital-sovereignty-is-far-more-than-compliance/ 3/3