By

The New AI Arms Race Is About Control, Not Charm

 

The New AI Arms Race Is About Control, Not Charm

Sovereign AI and Digital Control

 

 

The New AI Arms Race Is About Control, Not Charm

The real fight in artificial intelligence is no longer over who can build the flashiest chatbot. It is over who controls the machines, the data, and the law. Governments across Europe and elsewhere are now treating AI infrastructure as a matter of sovereignty, not convenience, because the cost of dependence on foreign cloud providers is no longer theoretical.

That shift has arrived with particular force in the partnership between NVIDIA and Palantir, a collaboration built around what the industry now calls sovereign AI. The phrase sounds tidy, almost bureaucratic. In practice, it means something much more blunt: keep sensitive AI systems inside national borders, keep them under local control, and do not trust foreign companies, foreign courts, or foreign politics to leave them alone.

A technology race that is really a power race

For years, AI was sold to the public as a consumer product. Open a browser, type a prompt, get an answer. The selling point was speed and spectacle. Yet the more governments and strategic industries depend on these systems, the less the old cloud model makes sense.

The normal arrangement is straightforward. A user sends a query to a large model hosted by an American company, and that company processes the request in data centres that are often, though not always, located in the United States. That works well for shopping lists, draft emails, school essays, and the sort of synthetic productivity that fills software demonstrations. It is less attractive when the user is a defence ministry, a police agency, an energy network, or a hospital system handling private records.

The reason is not just sentiment. It is law, jurisdiction, and risk. A country that routes sensitive data through foreign infrastructure is inviting another state’s legal system into its own affairs. The United States CLOUD Act made that problem impossible to ignore. It gives American law enforcement access to data held by US companies, regardless of where the servers sit physically. That alone is enough to make a foreign government uneasy. Add geopolitical friction, trade disputes, sanctions, and the possibility of political retaliation, and the old cloud model starts to look like an act of faith.

Sovereign AI is what happens when that faith runs out.

Why governments are suddenly talking like infrastructure ministers again

The new language of AI sovereignty is not coming from hobbyists or start-up founders. It is coming from ministries, regulators, and executives who have spent the past decade discovering how fragile digital independence really is.

The appeal is obvious. A government wants to use advanced AI to analyse documents, sift intelligence, detect cyber threats, and support logistics without handing its material to an outside platform. A ministry may not object to American technology in principle. It may object to being dependent on it.

That distinction matters. Dependence is not the same as choice. Once a state builds enough of its internal workings on foreign platforms, it no longer controls the failure modes. A pricing change, an export restriction, a compliance review, a legal order, or a diplomatic rupture can all become operational problems. If the system is foreign-owned, then the owner’s priorities matter as much as the user’s.

The NVIDIA-Palantir alliance is designed to answer exactly that problem. NVIDIA supplies the hardware, especially the GPUs that have become the engine room of modern AI. Palantir supplies the software and the control layer, the part that manages access, monitoring, and governance. Together, they offer a way to run advanced models without surrendering the entire stack to a foreign cloud giant.

That is the point. The product is not just AI. It is reassurance.

The Anthropic episode showed how quickly the politics can turn

If sovereign AI had sounded abstract before, it stopped sounding abstract in June 2026, when the US Commerce Department ordered Anthropic to suspend access to its most advanced models, Claude Fable 5 and Claude Mythos 5, for foreign nationals, including some of its own non-American employees.

The move was framed as a national security measure. The concern, according to the source material, was that the models’ cybersecurity capabilities might be exposed through a jailbreak technique. Anthropic had built safeguards into the systems. The government apparently decided that safeguards were not enough.

That is the real lesson. Once AI systems are deemed powerful enough to matter to national security, they stop being treated like software products and start being treated like strategic assets. Not all strategic assets are weapons, but the logic is similar. Access can be restricted. Distribution can be limited. Certain users can be excluded. The state can intervene.

What had been a commercial platform became, almost overnight, a controlled capability.

The Anthropic case also exposed the tension between innovation and restriction. Companies want to build models that can reason, assist, and improve. They also want to explore recursive self-improvement, where AI systems help design better AI systems. Governments look at the same possibility and see not progress but exposure. A model that can help improve itself may also help someone bypass the guardrails around it. A system trained to explain cyber defence may be used to reverse-engineer cyber offence.

That is why the debate is so fraught. The more capable the model becomes, the more it resembles an object of policy.

Privacy for the individual, sovereignty for the state

There is a curious overlap between sovereign AI for governments and Apple’s Private Cloud Compute for consumers. The audiences are different, but the worry is the same: if AI is going to handle sensitive information, it had better not become a surveillance machine by default.

Apple’s approach is built on a simple but demanding promise. A device can offload some AI work to the cloud while still preserving the privacy guarantees associated with on-device processing. The servers run specialised hardware. They use cryptographic attestation so the device can verify what software is in place before sending data. Processing happens inside encrypted enclaves. The data is then discarded rather than stored.

That architecture matters because it recognises a truth many tech firms prefer to avoid. Users do not merely want intelligence from AI systems. They want discretion. A person asking about health, finances, family issues, or legal trouble is not really asking for convenience. They are asking for help without exposure.

Governments are asking the same thing at a larger scale. The logic is identical. The user wants computation without surrendering control of the underlying material.

This is where the rhetoric of openness gets shaky. The technology sector spent years describing centralisation as efficiency. It was efficient, up to the point where too much efficiency became dependence. Now the same companies that built the centralised model are being asked to offer local control, selective access, and systems that can be verified but not freely inspected by outsiders.

It is an awkward adjustment for firms that built their business on scale.

Europe’s sovereignty campaign is not a mood; it is a reaction

The loudest political case for digital sovereignty is now being made in Europe, where policymakers have watched American cloud dominance become a structural fact of life. Microsoft, Amazon Web Services, and Google hold more than 70 percent of the European cloud market, while European providers have been pushed down to around 15 percent. That is not a healthy competitive balance. It is a dependency.

European officials know it. They talk about sovereignty because they have run out of polite synonyms.

Commission President Ursula von der Leyen and former European Central Bank chief Mario Draghi have both pushed the idea explicitly. The EU Cloud and AI Development Act, published in June 2026, is the latest attempt to claw back leverage from American platforms. The law itself matters less than the strategic instinct behind it: if Europe cannot own the entire stack, it wants enough of the stack to keep the lights on when politics turn ugly.

The Trump administration’s confrontational posture toward transatlantic relations only sharpened that instinct. The source material is blunt on this point. European anxiety is not some abstract fantasy about self-sufficiency. It is tied to a live concern that Washington could, whether by choice or pressure, make life harder for its allies.

That concern is not irrational. States use leverage. They always have. The difference in the digital age is that leverage can be exercised through contracts, platforms, standards, export controls, and access rules rather than armies and embassies.

Liisa Pakosta, Estonia’s Minister for Digital Affairs, described digital sovereignty as a matter of national survival. That sounds dramatic until you remember Estonia’s history, its geography, and the scale of cyber pressure in Europe. In a region that has spent years bracing for Russian cyberattacks, the idea of depending on foreign cloud architecture for critical systems does not look like prudence. It looks like a wager.

The CLOUD Act problem is bigger than a law school debate

Much of the public discussion around cloud sovereignty remains too abstract, too anchored in legal language that feels remote from ordinary life. It should not be. The CLOUD Act is one of those pieces of legislation that sound technical until a government lawyer points out what they mean in practice.

If a company is American, American law can reach it. That is the core problem. A server sitting in Frankfurt or Paris is not magically insulated if the provider is still subject to US jurisdiction. To a defense ministry, a health service, or a national tax authority, that is not a footnote. It is the whole issue. Personally, I think cloud servers have to be like embassies! An American company with a data center on German soil will have diplomatic status!

This is why sovereign AI discussions keep returning to a single question: who gets to say no?

If the answer is “a foreign regulator,” then sovereignty is already compromised. The point of local infrastructure is not merely that the machine is physically nearby. The point is that the local authority can control access, approve operations, enforce policy, and prevent a foreign government from reaching through the stack when it suits its own interests.

The source material also hints at something else: many nations are not merely afraid of data theft. They are afraid of strategic interruption. The fear is that Trump’s America, or any future American administration, could pull the plug in a moment of geopolitical tension. That concern may sound extreme to some readers. It will not sound extreme to anyone who has watched sanctions, export bans, and platform restrictions reshuffle entire industries.

Dependency is a comfortable word until the supplier becomes a political actor.

Bias is the quiet argument pushing people toward local models

Security gets the headlines, but bias may be the issue that pulls ordinary users and institutions toward sovereign AI faster than anything else.

American AI models are not neutral in the sense their marketing departments suggest. They are shaped by alignment work, policy decisions, and the cultural assumptions of the people building them. The result, according to the source material, is a recurring tilt toward progressive interpretations of climate policy, public health, gender, and diversity.

That may not matter much if you are asking a model to rewrite a paragraph. It matters a great deal if you think the machine is also framing the debate.

Users notice this. They notice when a model seems to steer every contentious question toward familiar Silicon Valley conclusions. They notice when the machine sounds less like a tool and more like a lecturer with a prewritten syllabus. Once that happens, trust declines. The problem is not simply that the model has values. The problem is that it pretends not to.

This is where sovereign AI acquires political appeal beyond the state. A conservative government may want a model that does not automatically inherit Bay Area assumptions. A religious institution may want a system that respects its doctrine. A company may want a model tuned to its own risk tolerance, not a model that has been globally sanitised by a distant platform.

Sovereign infrastructure makes that possible. It allows organisations to fine-tune models around their own values, their own data, and their own political red lines.

Of course, that solves one problem by creating another.

The world could end up with national AI dialects

If every country starts training and deploying AI systems around its own priorities, the result will not be a single global intelligence market. It will be a patchwork of local systems, each with different blind spots, different rules, and different moral assumptions.

That fragmentation may be inevitable. It may even be desirable from the standpoint of cultural self-government. Not every society wants the same answers to the same questions. What counts as acceptable speech in one jurisdiction may be offensive in another. What counts as public interest in one place may be propaganda elsewhere.

But fragmentation has a cost.

The more AI systems become nationally bounded, the harder it will be to preserve interoperability. Researchers may find themselves working across incompatible stacks. Companies with international operations may need multiple AI environments for multiple markets. A model that is acceptable in Brussels may be unwelcome in Riyadh. A model aligned for Washington may not satisfy Berlin. A model approved in Singapore may not meet Beijing’s expectations.

That is before you get to the political risk. Once nations own their own AI infrastructures, they will be tempted to use them as instruments of narrative control. A government that insists on sovereign AI for security reasons may soon discover other uses for the same machinery. It can filter answers. It can emphasise approved facts. It can reward patriotic framing and penalise dissent.

Sceptics are right to worry about that. Sovereignty is not automatically virtue. It is control. What a state does with control depends on the state.

The NVIDIA-Palantir model is less about models than about trust

The commercial significance of the NVIDIA-Palantir partnership lies in what it sells, and what it does not.

It does not sell a magical new intelligence. It sells a secure operating environment. NVIDIA brings the chips that power the work. Palantir brings the software that governs how the work happens. Together they make a promise that matters in procurement meetings and security reviews: you can use modern AI without exposing sensitive operations to the outside world.

That promise will attract governments, defence contractors, public utilities, and large firms that handle regulated or proprietary material. It may also attract countries that want the capabilities of frontier AI without the political baggage of American cloud dependence.

The arrangement has a broader industrial logic. Sovereign AI requires more than model quality. It requires data centre capacity, chip supply, physical security, software controls, auditing, identity management, regulatory compliance, and staff who can operate the whole system without creating new vulnerabilities. Few companies can do all that alone. Partnerships are not just convenient. They are necessary.

That is why the market may tilt toward alliances rather than pure products. The winner will not simply be the company with the smartest model. It will be the company that can persuade sceptical clients that the model will stay where it is supposed to stay.

Trust is the new feature.

Why France and other European states keep reaching for the same answer

The source material points to France as an example of a country trying to move away from American tools, even down to replacing teams with Visio. That detail may sound small, even comic, but it says something larger about the European mood.

When governments and institutions start swapping out everyday software, they are not merely making procurement choices. They are signalling discomfort with the broader dependence underneath those choices. One tool leads to another. A messaging platform leads to document storage. Document storage leads to AI workflows. AI workflows lead to dependency on the same foreign stack.

Europe has seen this movie before. The internet looked open until a few American companies swallowed the market. Cloud computing looked modular until a few hyperscalers became the backbone of everything. AI now risks repeating the pattern, only faster.

This is why the call for sovereign cloud has become louder. It is not just a slogan for bureaucrats. It is an architectural requirement if Europe wants any real leverage. The region may not be able to outspend American giants on every layer. It can, however, insist that the most sensitive layers remain under local law and local control.

That is the sober view. The sentimental view says Europe should simply build better domestic alternatives. The practical answer is harsher. If foreign tools are cheaper, better, and more integrated, they will be used until they become politically impossible. That is not an argument against sovereignty. It is an argument for accepting the market as it is, not as wishful thinking pretends it ought to be.

Export controls have moved from chips to models, and that changes everything

For years, the policy argument around AI centred on hardware. Chips were scarce, expensive, and easy to count. Governments could regulate exports, track shipments, and use semiconductor policy as a proxy for strategic competition.

Now the argument has moved up the stack.

The Anthropic case suggests that advanced AI models themselves are becoming objects of export control. That matters because software can be copied far faster than chips can be moved. A model can be mirrored, distributed, withheld, or locked behind access controls. It can be made available to some users and denied to others. In other words, it behaves more like a controlled capability than a consumer service.

Once that logic takes hold, the boundary between commercial AI and strategic AI gets thinner. A company may launch a model to the public, only to see parts of it restricted in response to national security concerns. A government may demand local hosting, access audits, and personnel screening. A foreign employee may be treated as a risk factor. A product launch may become a diplomatic event.

This is not a temporary detour. It is the direction of travel.

The deeper implication is that AI governance is moving from ethics committees to geopolitical committees. That is a less polite conversation, but a more honest one. It acknowledges what the technology already is: a force multiplier whose value depends on where it is deployed and who controls the switch.

The old cloud was built for convenience; the new one is being built for suspicion

There was a time when the cloud was marketed as a cure for hassle. Offload the server, forget the hardware, trust the provider. The model suited a period of relative political calm and corporate optimism. It also suited a business world eager to outsource complexity.

That era is fading.

The new cloud is being built under suspicion. Not paranoia, but suspicion. Governments want assurances about where data goes. Corporations want assurances about who can see it. Users want assurances about what the model is allowed to do and what it is not. The burden on vendors is no longer just uptime. It is legitimacy.

That is why sovereign AI matters. It translates a strategic fear into an operational requirement. It tells procurement officers, ministers, and security chiefs that they can use advanced systems without surrendering the keys. It tells investors that the next wave of demand may come not from casual consumers but from institutions that care about control more than novelty.

It also tells the tech industry something it has resisted for years: scale is not the only source of power. Jurisdiction is power. Geography is power. Access rules are power. The companies that understand this will adapt. The companies that do not will keep mistaking market dominance for permanence.

The sovereign AI race is not about who writes the cleverest prompt. It is about who gets to decide where the answer lives, who can see it, and under whose law it exists. That is a much older kind of contest, and a much harder one to settle.

This post contains affiliate links. If you purchase through these links, I may earn a commission at no extra cost to you.

 

Leave a Reply

Discover more from Thoughts on Technology

Subscribe now to keep reading and get access to the full archive.

Continue reading