Infrastructure, Compute and European Digital Sovereignty

All courses / AI Platform and Security / Module 3 / Chapter 13

Learning objectives

After the lesson the participant can:

• Explain digital sovereignty as a set of verifiable properties instead of a synonym for on-premises.
• Identify the transfers of personal data that AI workloads create where classical applications did not.
• Apply the sovereignty decision matrix to a workload using its data classification and risk class.
• Draft a sovereignty requirements profile in which each requirement states how it is verified.

Key concepts

Digital sovereignty

The ability of European organisations to control their data, infrastructure and models. It is a set of properties: knowing where workloads run, showing which law governs them, changing provider without rewriting the estate, and continuing to operate if a provider becomes unavailable.

Capacity plan as code

A reviewed file that reserves capacity for interactive inference, schedules batch work such as evaluation and fine-tuning into the gaps, caps agent traffic and reserves fallback inference, compared quarterly with observed utilisation.

Sovereignty requirements profile

A list attached to a tender in which each requirement is mandatory or weighted and states how it will be verified, so that the evaluation committee scores evidence and the platform team can check the same attributes after award.

Confidential computing

Running workloads inside hardware-enforced trusted execution environments so that data is protected in use and the operator cannot read memory. The book treats it as a strong supplementary measure whose attestation must be verified in the deployment pipeline.

Sovereignty decision matrix

A matrix in the architecture repository that sets workload attributes, from public information to classified data, against placements, and is evaluated at intake as a rule set against the workload's declared classification.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Teaching plan

Discussion

1. In AIDR-0211 the option with the best task quality did not win. How would your organisation set the weights before scoring, and who would agree them?
2. Which flows of personal data to a third country does your AI use create that nobody decided on, such as telemetry or support access?
3. Hansa Mutual treats adequacy decisions as dependencies with an owner and a review date. Which legal or contractual assumptions does your placement rest on, and who watches them?

Written exercise

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

1. How does the chapter define digital sovereignty?

   1. As running every AI workload, including training and fine-tuning, on accelerators in the organisation's own data centre
   2. As buying only from providers headquartered and operated in the European Union
   3. As a set of verifiable properties, such as knowing which law governs a workload and being able to change provider
   4. As holding a Gaia-X label for every cloud service in use
   Show the answer

   C. As a set of verifiable properties, such as knowing which law governs a workload and being able to change provider
   The chapter states that sovereignty is not a synonym for on-premises but a set of verifiable properties of control over data, infrastructure and models.

2. What did applying the decision matrix do for Nordvik Region's correspondence summaries, which may include Article 9 health data?

   1. It stopped the workload from going to the most convenient placement while the compliant one was not ready
   2. It placed the workload with a hyperscaler EU region under a transfer assessment
   3. It showed that the workload needed no placement decision at all
   4. It moved the workload to an EuroHPC AI Factory for production inference
   Show the answer

   A. It stopped the workload from going to the most convenient placement while the compliant one was not ready
   The summaries wait until two additional accelerators are installed on premises; the chapter calls this the matrix's most useful job.

3. In Nordvik Region's tender profile, why is a machine-readable self-description such as a Gaia-X label weighted and not mandatory?

   1. Because Gaia-X labels are only available to hyperscalers that operate sovereign regions through a European legal entity
   2. Because the data protection officer had rejected the label as unreliable
   3. Because weighted requirements are verified after award and mandatory ones before
   4. Because only what the legal analysis makes non-negotiable is mandatory, keeping the tender open to competition
   Show the answer

   D. Because only what the legal analysis makes non-negotiable is mandatory, keeping the tender open to competition
   Everything beyond the legally non-negotiable is weighted, in line with the equal-treatment principles of Directive 2014/24/EU.