UAE’s sovereign financial cloud aims to safeguard more than just data
The UAE Central Bank’s initiative to build a sovereign cloud platform for the country’s financial institutions goes beyond data residency, according to experts.
The AI-powered sovereign financial cloud service infrastructure, which will function on an isolated yet centralized architecture, is designed to ensure the continuous availability of critical financial services for the local financial sector.
“Sovereign financial clouds are designed to protect the financial system itself, not just the data inside it,” Matt Kaluzny, a cloud & data architect tells Salaam Gateway.
“The objective of sovereign financial clouds is to combine the scale and maturity of global cloud platforms with national control over sensitive financial infrastructure.”
Operated by Core42, a subsidiary of Abu Dhabi technology group G42, the platform will ensure data sovereignty and integrity, isolating it from global outages, cyber threats and geopolitical disruptions. Embedded real-time analytics and AI monitoring will add an additional layer, driving intelligent automation, deeper operational insights and better decision making.
“Sovereign cloud is a cloud ecosystem that ensures complete control over data, infrastructure, and operations, free from external jurisdictional influence, and aligned with local regulatory, technical, and operational requirements,” Manish Ranjan, research director for software & cloud at International Data Corporation tells Salaam Gateway.
Western hyperscalers such as Amazon Web Services (AWS), Oracle and Microsoft have substantial presence on ground, operating assets across the UAE. AWS launched its Middle East (UAE) region in 2022, which includes three availability zones housing one or more data centres; Oracle and Microsoft both run multiple cloud regions, including data centres in the country.
The key difference between the two configurations lies in its jurisdictional control and focus. For instance, AWS cloud is sovereign-by-design, offering controls that permit customers to meet their sovereignty requirements, but a sovereign cloud is a purpose-built, isolated environment, operating under state’s oversight and control.
“Global providers such as AWS already support UAE rules on data location, privacy, and assurance and are widely used by banks. By embedding security guardrails, automated policy checks, and reporting, [the sovereign financial cloud] minimises compliance overhead and accelerates deployment. Banks still retain architectural and operational control of their applications and data, but they benefit from a more standardized, regulator aligned environment,” says Ranjan.
Centralizing governance, localizing control
Lijo Joseph, IT project manager at Pru Life UK says that what makes this significant is the idea of introducing regulatory oversight directly into financial infrastructure.
“Today, many financial institutions operate with different cloud environments, different security controls, different compliance interpretations. Instead of every bank solving compliance independently, governance becomes part of the platform itself,” explains Joseph.
Core42’s broader sovereign cloud strategy is publicly centred around a multi-year partnership with Microsoft, but whether the sovereign financial cloud will leverage the hyperscale capabilities of the alliance remains unclear.
“Core42 has a long-standing partnership with Microsoft and already operates large-scale AI and cloud platforms using Azure technology. It is therefore likely that elements of this partnership will support parts of the sovereign financial cloud infrastructure. However, in sovereign cloud models, the key question is not only which hyperscaler technology is used, but who governs the environment and controls the critical security layers,” adds Kaluzny.
“While the cloud may leverage global hyperscaler technologies, operational control remains local. This means that critical elements such as security tooling, access policies, and encryption key management are administered within the UAE under national regulatory oversight. The sovereign operator controls how the infrastructure is configured, monitored, and governed, while hyperscaler platforms provide the underlying technology stack.”
What is clear in no uncertain terms is that it will rev up innovation and ingenious solutions through the platform.
The sovereign financial cloud platform will potentially drive innovation more than a general purpose cloud, says Ranjan, with a sector specific sovereign platform creating a shared digital foundation across banks, allowing them to experiment, co-develop, and scale solutions.
“However, it is critical to ensure this platform supports modern cloud native tooling and open standards,” he adds, “so it doesn’t slow down the pace of innovation that the financial sector now expects.”
