Sovereignty is not a line item on an NVIDIA invoice. Yet that is how much of the world is now buying it. NVIDIA booked over $30 billion of sovereign AI revenue in its last fiscal year, more than triple the year before. Governments have decided that AI is national infrastructure, and they are right. Then most of them procure it the way a struggling football club buys strikers: expensively, publicly, and with no system to put them in.

The hardware is real, and in some places so is the execution. Abu Dhabi's Stargate UAE brings its first 200 megawatts online this year, the opening phase of a one gigawatt cluster that OpenAI and Oracle will operate. Saudi Arabia's HUMAIN is bringing its first data centres online in Riyadh and Dammam at up to 100 megawatts each. Europe, by contrast, has a €20 billion envelope for AI gigafactories, 77 expressions of interest from 16 member states, and rather less concrete poured. Britain's Compute Roadmap commits public compute to a twentyfold expansion, from 21 to 420 AI exaFLOPS by 2030.

The pattern is clear enough. The Gulf executes. Europe deliberates. And nearly everyone buys from the same two or three vendors.

That last fact is the problem. Washington rescinded the AI Diffusion Rule in May 2025, two days before it was due to take effect. The GAIN AI Act would swing policy the other way, requiring exporters to certify that American buyers had first refusal on advanced chips before certain licences are granted. The Senate attached it to its defence bill, conference stripped it out, and it survives as a standalone measure still waiting for a floor. Access terms have moved twice in eighteen months and are being fought over a third time. A national AI strategy that assumes stable chip supply is not a strategy. It is a hope with a budget line.

Now look at what most of this spending actually purchases: a photograph. A ribbon, a rack, a benchmark score. The announcements are structured for the evening news, not for the decade of operations that follows. A national foundation model that no ministry deploys is a press release with a training bill.

Sovereignty is measured at the point of governing, not the point of the demo.

The real test sits elsewhere. Can the state inspect the weights running its benefits system? Can it reconstruct a model's decision for a court, or for the citizen the decision was made about? Can it switch providers without losing ten years of operational data? Those are the three questions I ask of any sovereign AI programme, and beside them the GPU count becomes strangely irrelevant. The scarce resource was never chips. It is evaluators, engineers and procurement officers who can hold a vendor to account, and data pipelines clean enough to be worth being sovereign over. Hardware can be airfreighted. None of that can.

The turn cuts against the critics as much as the buyers. The purist answer, that sovereignty means owning the whole stack, is theatre of a different kind. Nobody owns the stack. Even the United States imports its lithography. Energy, chips, compute, models, data, talent, institutional capacity: every state on earth rents at least half of that list.

Real sovereignty, as I would define it, is negotiated dependence with reversibility built in. If a supplier or an ally changes the terms, what breaks, and how fast can you re-route? By that standard, a small state renting compute under a contract with tested exit clauses is more sovereign than a large one that owns a stranded national cluster it cannot staff, power or audit. Contracts, second sources and rehearsed exits are the real sovereign assets. They just do not photograph well.

What governments should do

Sequence beats scale. The order matters more than the budget.

  • Data governance and residency first. National data is the only input a state uniquely holds. Sort it before buying anything.
  • Inference before training. Most sovereign workloads (benefits, borders, tax, health) are inference. Build the capacity you will use daily.
  • Fine-tune and distil open-weight models on national data before funding a frontier training run. Earn the case for scale rather than assuming it.
  • Contract for compute with exit clauses and portability tested, not promised. A clause nobody has rehearsed is a decoration.
  • Anchor electricity early. More than 2,000 gigawatts of generation and storage capacity sat in United States interconnection queues at the end of 2025, and only 13 per cent of the capacity that applied to connect between 2000 and 2019 had reached commercial operation by the end of 2024. NERC's 2026 summer assessment still flags shortfall risk in parts of North America under extreme conditions, even after a record year of new generation. Power, not silicon, is the binding constraint of this build cycle.

A state that follows this order buys capability at every step. A state that starts by announcing a national model usually ends with a benchmark score and a dependency.

What enterprises should do

For boards, sovereignty has stopped being geopolitics and become a procurement gate. Gulf and EU public tenders, and regulated sectors everywhere, increasingly demand in-country processing, auditable model supply chains and demonstrable exit routes from hyperscale providers. Three answers now need to exist on paper, and I would not sit on a board that could not produce them: where every model runs; what breaks if a US export decision changes; how fast workloads can move. Enterprises that can produce those answers will win government work. Those that cannot will be quietly disqualified, and nobody will phone to explain why.

Expect residency clauses to fragment your AI estate across sovereign regions, each with its own pricing and its own capability lag. Price that in now, while it is still a planning exercise rather than an incident.

The export terms will change again. It is the one prediction in this field I would make without hedging. When they do, we will learn who bought theatre and who built capability, and the difference will not show up in anyone's GPU count. It will show up in whose systems keep governing the next morning. Racks depreciate. Capability compounds.