Perspectives on sovereignty, assurance and sovereign AI
Commentary from the Vault UK team and the people around it on the questions our customers are actually being asked.
Longer-form work from the Vault UK team and the people around it. Each paper has a short read on this site and a full version to download.
The rules-based international order has ruptured, technology has turned out not to be neutral, and the UK's planning assumptions have not caught up. A discussion paper on the eight areas where the UK needs sovereign capability — and why cloud is the one where the gap between claim and reality is widest.
Read the short versionPieces we are working on, including a second discussion paper developing the themes above. If one of these is a live question in your organisation, we would rather have the conversation than make you wait for the write-up.
A UK region on a global hyperscaler is not sovereignty. What matters is whose law can compel disclosure, and who holds the operational keys — questions that a data centre location does not answer.
The datasets with the most latent value are the ones that cannot leave their assurance boundary. Sovereign GPU capacity is what turns them from a liability into an asset.
In high-assurance environments the cost of change is rarely the build. It is proving the changed system is still safe. That single fact shapes every serious architectural decision.
Cyber risk flow-down has moved from boilerplate to something primes genuinely audit. A practical read of what suppliers need to be able to evidence.
Fourteen principles, and only some of them are really about the provider. A guide to which questions to put to a cloud supplier and what a good answer looks like.
Neo cloud providers changed the price of GPU compute. Applying that model inside a sovereign assurance boundary is harder — and more valuable.
Have a question raised by something you have read? Get in touch.
