IBM Launches Sovereign Computing Stack
IBM is promoting sovereign computing with a new cross-cloud software stack designed to meet data residency, security, and regulatory requirements. The solution allows enterprises to maintain control over data location and access across public and private clouds, a key concern under strict EU mandates like GDPR.
- The stack is built on Red Hat's open-source foundation, specifically utilizing Red Hat Enterprise Linux, OpenShift for container orchestration, and IBM Verify for identity access management. - A key architectural differentiator is its customer-operated control plane, which allows an organization to manage everything—including software operations, configurations, and encryption keys—without intermediation from IBM, a direct response to foreign access concerns outlined in regulations like the U.S. CLOUD Act. - The solution is explicitly designed for AI workloads, ensuring that both the data and the AI models used for inference remain within the customer's jurisdictional control and auditable. - Beyond GDPR, the stack is positioned to help enterprises meet emerging European regulations such as the proposed European Cybersecurity Certification Scheme for Cloud Services (EUCS) and the Digital Operational Resilience Act (DORA). - Unlike competitors such as AWS, which recently launched its distinct "European Sovereign Cloud" region in Germany, IBM's approach is a software-defined stack that can be deployed on various infrastructures, including on-premises data centers or other in-region cloud providers. - A technical preview of the "Sovereign Core" was expected in February, with an initial rollout in Europe through partnerships with local IT service providers Cegeka in Belgium and the Netherlands, and Computacenter in Germany. - The offering incorporates confidential computing principles, which protect data while in use within a hardware-based Trusted Execution Environment (TEE), making it inaccessible even to a cloud provider with privileged access. - This launch targets a growing market, with Gartner research predicting that by 2030, more than 75% of enterprises will have established a digital sovereignty strategy.
