2025: the year of more governance on Cloud

2024 is almost upon us. In addition to the music and news fact lists that traditionally emerge in December, it's good to look at the changes in 2024 with a pair of Cloud glasses on. What have we seen? Cloud is still perceived as convenience, but there is a growing awareness among users regarding data ownership and related data classification. Simply put, there is an increasing focus on which data should go into which Cloud.

Different types of Cloud

Thanks to growing awareness, users are also looking more closely at the different types of Cloud: Public, Hyperscaler, Private and Self-hosted Cloud are the most frequently mentioned among them. And all these Clouds have their own characteristics. The Hyperscaler Cloud excels in convenience and its extensive capabilities, but obviously with that comes a more challenging cost model.  

Private Cloud has gained territory in this regard. Not because of the multitude of possibilities, but rather because of the local nature and personal approach of Private Cloud parties. Self-hosted Cloud has also gained ground for the larger companies, particularly due to remigration from the Public Cloud. Steadfastly from a cost perspective.  

With the changing world involving wars on multiple continents and new rulers in different countries, the demand for self-reliance has increased. This also applies to Cloud. Storing data in the Cloud has made an increasing number of organizations and companies realize the dependence on the Cloud in business operations, but also the risk of data access.

‍

Sovereign Cloud

To ensure that data is both available and accessible, as well as protected from access by foreign powers, legal aspects of data storage are considered in addition to technology. Who has access to the data and in what physical location is the data stored?

The definition of the sovereign Cloud is that it guarantees that data is stored according to the laws of the country where the Cloud is hosted. The term sovereign Cloud arose several years ago from the mantra that this Cloud is structured from several aspects. These aspects are shown in the figure below. Consider data locality and classification, as well as local management by a sovereign entity, where continuous compliance with laws and policies is central. In addition, innovation and modernization is realized within the sovereign domain. A great example in this is Private AI, which includes all AI and DATA Act implementations. You can read more about this in our blog article on the sovereign Cloud byFundaments.  

By now, this term has already been positioned as a definitive form of Cloud. As a matter of fact, Cloud sovereignty is already a topic within the European Union, but now also within Dutch politics. For example, the Secretary of State for Digitalization, Zsolt Szabó, recently talked about the sovereign Cloud or as he also referred to it, autonomous Cloud. In this, the definition is not yet entirely clear. But the signal and call for more autonomy when we talk about Cloud solutions becomes clear herein.

Adjustment of guideline in Cloud procurement

The desire for greater autonomy is also driven from Cloud procurement guidelines. This initiative requires government data to be protected from interference by a foreign power. It will demand full visibility of where and how data is stored, as well as who has access to the data. In this, the company operating the Cloud is bound by laws and regulations from the country from which it operates. This also applies to employees. All part of the overall “governance” of the data stored in the Cloud.  When we look at public hyperscalers in America from this discussion, we see different answers. Building a sovereign Cloud on European soil by Amazon and Microsoft Azure, for example, is highlighted therein by appropriate measures. But, in that, the question is whether the total package is right. Bert Hubert talks about that very nicely inn this article.

So, do it yourself?

The time to take matters into our own hands in the Netherlands and Europe has come. Due to geopolitical issues, we need to become more self-sufficient on many fronts, think of energy supply and defense. The same applies to digitalization and therefore Cloud infrastructure. Is this even possible? Certainly. In the Netherlands we have fine knowledge parties and there is plenty of expertise in the field of private and sovereign Cloud. This knowledge should be requested by the policy maker and included as a mandatory part of the Dutch and European Cloud infrastructure. A great platform will then be able to emerge.

And what about AI?

2025 will be packed with initiatives in AI applications. Organizations will actually start turning the initiatives into products and services. Again, data will be central in this and a thorough examination of how it is protected will be required. Indeed, more problems will emerge as well if there is not a proper look at how the data used by AI is not protected well. This is where I also expect some spectacular cases in 2025.

When training models, the data and roles applicable in the use of data must be carefully considered. So, here too, it is not only about technology, but also about regulation. From the Data ACT and AI Act, this is also being addressed in Europe. Such policies will ensure that data used by AI will be used deliberately. Many voices cry out that this legislation gets in the way of development and flattens innovation; on the contrary, I think it puts the guardrails down on data disasters.

Fundaments and 2025

There are some great plans in store for 2025 that I will explain in greater detail in the new year. The common thread will always remain the continuity and protection of your business critical data, whether applications, platform or AI. With Private Cloud solutions, we can provide solid building blocks that ensure secure access and protection in storage. And with our great team, we provide low cost partnership in development and support of your Private Cloud.  

So, enjoy the holidays and let's make sure 2025 is going to be a year of getting a grip on data! Looking forward to it.