Everyone is talking about digital sovereignty. In part 1 of our blog series, we showed that it is not a political vision but a genuine business foundation. Part 2 focused on the fundament: data centers, cloud and IT infrastructure. Now we turn to the layer users work with every day: platforms, solutions and services, above all in IT security. This raises the final question: when and how are you truly sovereign and independent at this level? Because this is where it becomes clear whether the aspiration turns into lived practice.

In the first part of our blog series, we showed that digital sovereignty is not a political vision but a business fundamental. Yet sovereignty starts with the foundation. Data centers, cloud and IT infrastructure determine whether control is truly real. Three questions get to the heart of it: Where is the data physically located? Who operates the systems? And under which jurisdiction does this happen? Anyone who cannot answer these questions is building their digitalization on foreign ground.

For a long time, digital sovereignty was a term reserved for strategy papers and empty rhetoric. That has changed. Geopolitical tensions, new regulations, and growing dependence on a handful of providers have turned a political buzzword into a tangible business issue. Anyone making decisions today about the cloud, data, IT architecture, or IT security is also making decisions about control, freedom of action, and future viability. It’s high time to turn this topic on its head: What does digital sovereignty really mean – and what does it mean specifically for your company?