What is sovereign cloud? Control, resilience & risk explained | Ladybug Unplugged | Episode 1.

Lysa Banks:
Sovereign cloud sounds technical — and it is — but it’s also political. Sovereignty isn’t about avoiding cloud; it’s about resilience. It’s about surviving that proverbial switch being flipped.

Welcome to Ladybug Unplugged, where we keep it real. We cut through buzzwords, turn off the filters, and say the quiet parts out loud. No polish, no PR — just the truth, unplugged.

Today I’m joined by Sander Nieuwenhuis, an expert in sovereign cloud. He has over 20 years’ experience in information security, more than 10 years in cloud, and has been advising organisations at Nordcloud for almost five years, specialising in governance, risk, and compliance.

Sander helps ensure that roles and responsibilities are clear, that business compliance needs are translated into technical solutions, and — most importantly — that operational processes move from slides into reality.

Sander, thanks for joining me.

Sander Nieuwenhuis:
Thanks for having me.

Lysa Banks:
Let’s jump straight in. What is sovereignty, and why does it matter?

Sander Nieuwenhuis:
It’s a topic we hear a lot about at the moment. At its core, sovereignty is about control — control over what happens to your data and your cloud resources.

With current geopolitical uncertainty, especially around US‑based hyperscalers, European organisations are asking important questions. What happens if cloud services become unavailable, unaffordable, or restricted? What happens if political decisions impact access to critical infrastructure?

That’s why sovereignty is back on the agenda. Organisations want to ensure they retain control over their cloud environments.

Lysa Banks:
Historically, we talked a lot about data sovereignty, which often became a discussion about data residency. But this feels broader.

Sander Nieuwenhuis:
Exactly. Sovereignty is not just about where data is stored. It’s about control, resilience, and business continuity — being able to keep operating when conditions change.

Lysa Banks:
One topic that often comes up is the US Cloud Act. Can you explain what it is, factually?

Sander Nieuwenhuis:
The US Cloud Act allows US authorities, with a warrant, to require US companies to provide data as part of a criminal investigation — even if that data is stored outside the United States.

Europe has similar legal mechanisms. The difference is that hyperscalers operate globally, which creates concerns about jurisdiction and access.

Lysa Banks:
And that uncertainty is part of what’s driving the sovereignty discussion?

Sander Nieuwenhuis:
Exactly. We don’t always know how these powers might be applied in the future. Combined with dependency on external providers, that uncertainty brings sovereignty back into focus.

On one side, there’s concern about continuity and affordability. On the other, there’s the question of trust. That’s why sovereignty ultimately comes back to control.