More Than Half of Global Businesses Want Greater Control Over Their Data in Latest Digital Sovereignty Push, According to Expereo

An IDC InfoBrief commissioned by Expereo found that 53% of enterprises want greater control over sensitive and strategic data, while 33% consider digital sovereignty a top or high priority. The findings indicate that AI adoption, cybersecurity concerns and compliance requirements are elevating digital sovereignty on corporate agendas, potentially supporting demand for secure data-management and network infrastructure solutions.

Analysis

This is a weak near-term trading signal: survey evidence does not establish incremental budget, contract timing, or vendor share. The more investable implication is a gradual shift from public-cloud concentration toward hybrid, sovereign-cloud and on-premise control planes, which favors vendors monetizing data residency, encryption, identity, and multicloud orchestration rather than commodity infrastructure alone.

Over the next 6-18 months, regulatory-driven workload segmentation could improve pricing power for Palo Alto Networks (PANW), CrowdStrike (CRWD), Zscaler (ZS), Cloudflare (NET), Oracle (ORCL), and IBM (IBM). ORCL and IBM are relatively differentiated where customers require dedicated regional capacity, managed private cloud, and compliance services; hyperscalers may retain compute demand but incur higher capex and operational complexity as regions and sovereign partnerships proliferate. European telecoms and systems integrators—such as Deutsche Telekom (DTEGY), Orange (ORAN), Capgemini (CAPMF), and Atos (AEXAF)—could see services demand, although their lower-margin implementation exposure makes them less attractive pure plays.

Consensus may overstate the risk to Microsoft (MSFT), Amazon (AMZN), and Alphabet (GOOGL): sovereignty often increases workload duplication and governance spend rather than causing wholesale cloud repatriation. The likely second-order outcome is higher enterprise cloud spend per workload, but with a larger security and compliance attach rate. Falsification would be evidence that compliance mandates produce material workload migration away from hyperscalers, or that enterprise CIO surveys translate into declining public-cloud consumption growth rather than incremental hybrid deployments.

Key Decisions for Investors

• No immediate directional trade from this release; add an alert for sovereign-cloud bookings, regional capacity commitments, and compliance-related RPO commentary in the next earnings cycles for ORCL, IBM, MSFT, AMZN, and GOOGL.
• Build a 6-12 month relative-value basket: long ORCL and PANW versus short IGV, sized modestly. Thesis is that sovereign and regulated deployments increase dedicated infrastructure and security attach rates faster than broad software spending; exit if ORCL cloud growth or PANW platformization billings decelerate materially versus IGV constituents.
• Prefer PANW over CRWD for the regulatory-security leg over 3-6 months, as network, SASE, and data-security consolidation is better aligned with controlling data movement across hybrid environments. Risk: endpoint-led security budgets remain dominant and CRWD reaccelerates net-new module adoption.
• Watch European sovereign-cloud procurement and EU data-residency enforcement as a 6-18 month catalyst; if contract awards accelerate, consider long ORCL/IBM against a hedged short of European IT-services exposure such as CAPMF, where labor-intensive delivery revenue may rise without equivalent margin expansion.