2025: the year of gaining more control over the Cloud

2024 is almost over. Beyond the music and news roundups that traditionally appear in December, it is a good time to look at the changes in 2024 through a Cloud lens. What have we seen? The Cloud is still viewed as a convenience, but there is a growing awareness among users regarding data ownership and the associated data classification. Simply put, there is an increasing focus on determining which data should end up in which Cloud.

Different types of Cloud

Thanks to this growing awareness, users are also taking a closer look at the different types of Cloud: Public, Hyperscaler, Private, and Self-hosted Cloud are the most frequently mentioned. And all these Clouds have their own characteristics. The Hyperscaler Cloud excels in convenience and extensive capabilities, but this naturally makes the cost model more challenging.

Private Cloud has gained ground in this regard. Not because of a multitude of features, but precisely because of the local nature and the personal approach of Private Cloud providers. The Self-hosted Cloud has also gained ground among larger companies, primarily due to remigration from the Public Cloud—invariably driven by cost considerations.

In a changing world with wars on multiple continents and new power dynamics in various countries, the demand for self-reliance has increased. This also applies to the Cloud. Storing data in the Cloud has made more organizations and companies realize that a dependency on the Cloud is emerging in their operations, but also that access to data poses a risk.

‍

Sovereign Cloud

To ensure that data is not only available and accessible but also protected against access by foreign powers, attention is being paid to the legal aspects of data storage in addition to the technology. Who has access to the data, and at what physical location is the data stored?

The sovereign Cloud is defined by the assurance—technically, legally, and operationally—that data is stored in accordance with the laws of the country where the Cloud is hosted. The term "sovereign Cloud" emerged a few years ago as an umbrella concept for a Cloud organized around several key aspects. These aspects are shown in the figure below. Think of data locality and classification, but also local management by a sovereign entity, where continuous compliance with laws and policies is central. Furthermore, innovation and modernization are realized within the sovereign domain. A great example of this is Private AI, which also incorporates all AI and DATA Act applications.You can read more about this in our blog post about the Fundaments sovereign Cloud.

‍

This term has now been positioned as a definitive variant of the Cloud. Cloud sovereignty is already a topic within the European Union, but now also within Dutch politics. For instance, the State Secretary for Digitalization, Zsolt Szabó, recently spoke about the sovereign Cloud, or as he also called it: autonomous Cloud. The definition here is not yet entirely clear. But the signal and the call for more autonomy when we talk about Cloud solutions are becoming clear.

Adjustment of guidelines for Cloud tenders

The desire for more autonomy is also being driven by procurement guidelines for the Cloud. This initiative demands that government data be protected against interference from foreign powers. This will require full transparency regarding where and how data is stored, as well as who has access to it. The company operating the Cloud is bound by the laws and regulations of the country from which it operates. This also applies to its employees. These are all components of the overall governance of data stored in the Cloud. When we look at this discussion in the context of public hyperscalers in America, we see various responses. The construction of a sovereign Cloud on European soil by companies like Amazon and Microsoft Azure is being highlighted with the necessary measures. But the question remains whether the total package is right. Bert Hubert explains this very well in this article.

So, do it ourselves?

The time has come to take matters into our own hands in the Netherlands and Europe. Due to geopolitical issues, we need to stand on our own two feet and become self-sufficient on many fronts, such as energy supply and defense. The same applies to digitalization and, by extension, Cloud infrastructure. Is this possible? Certainly. In the Netherlands, we have excellent knowledge-based organizations, and there is plenty of expertise in the field of private and sovereign Cloud. This knowledge must be requested by policymakers and included as a mandatory component of Dutch and European Cloud infrastructure. Then, a great platform can emerge.

And what about AI?

2025 will be packed with AI application initiatives. Organizations will start turning these initiatives into actual products and services. Data remains central to this, and we will need to take a close look at how it is protected. In fact, more problems will arise if we don't properly manage how the data used by AI is secured. I expect to see a few spectacular cases involving this in 2025.

When training models, it is essential to carefully consider which data and roles apply to its use. Here, too, it is not just about technology, but also about regulation. The Data Act and the AI Act are driving this in Europe. This policy will ensure that the data used by AI is handled thoughtfully. Many voices claim this legislation hinders development and stifles innovation, but I believe it actually provides the guardrails needed to prevent data disasters.

Fundaments and 2025

We have exciting plans in the pipeline for 2025, which I will elaborate on in the new year. The common thread will always be the continuity and protection of your business-critical data, whether it concerns applications, platforms, or AI. With our Private Cloud solutions, we can provide solid building blocks that ensure secure access and storage protection. And with our fantastic team, we ensure an accessible partnership in the development and support of your Private Cloud.  

So enjoy the holidays, and let’s make 2025 a year of gaining control over data! I’m looking forward to it.