Our digital infrastructure is increasingly becoming the backbone of modern society. Yet, most of us in Europe rely on software, applications, and data storage from foreign providers. As AI accelerates the digital revolution, this reliance turns Europe’s critical infrastructure into a vulnerability. What happens when our daily tools, like our data, apps and software, become political weapons beyond our control? Geopolitical tensions could force us to choose between a kill switch or compliance.
On March 31st, 2026, sustAIn.brussels, together with the Knowledge Centre for Data & Society, hosted an event at FARI, the AI institute for the common good, on this very topic: digital autonomy and how to turn strategic independence into a business opportunity. The event mirrored the current tech conversation: a single country and a handful of companies wield daily power over us. Digital autonomy is thus about reducing single points of failure and retaining control over essential systems that govern Europe today.
From Niche to Mainstream
As a European Digital Innovation Hub, this topic has been present at many events we’ve attended, has been a booming topic related to tech in the headlines, and is something that our clients are genuinely concerned about. In just three years, digital sovereignty has evolved from a niche concern to a central priority.
This shift revealed a stark reality that Europe over-relies on external providers, both in the private sector and public procurement, leaving us vulnerable to sudden major service disruptions or data access loss. And with these providers’ ecosystems so deeply interconnected, switching away feels like choosing between dependency or inferior alternatives, while human nature resists change.
SMEs Are Most Vulnerable
As SMEs and startups build their companies, they rely on what’s available. The current common practice among starting businesses is wrapping their operations around existing models or easy, popular software. Tools like ChatGPT for coding or Microsoft for team organization may seem like easy choices, but they create dependencies that could become vulnerabilities tomorrow. What happens if a country flips the kill switch? What happens when you can’t reach your team, write an email, or access your important documents?
These risks hit SMEs and startups the hardest. Smaller companies cannot afford, with time nor resources, to test different options as a replacement. As a result, they risk losing everything they’ve worked hard for.
But alternatives also come with their own set of challenges. For example, self-hosted models demand significant effort but offer greater control, and open-source tools are cost-effective but are often unsustainable in the long-term.
Legislation and compliance pose another hurdle, which is another luxury that many startups and small businesses cannot afford. Indeed, navigating data protection laws is already incredibly complex for businesses without a legal team. Adding a data sovereignty architecture on top of existing regulations could overwhelm small businesses. We must therefore decouple digital sovereignty from regulation. It should ultimately be encouraged but not enforced. Companies need flexibility to adopt such regulations at their own pace.
Building a business is already hard enough. Companies naturally prioritize ease of use and popularity over principles like sovereignty. So, if Europe wants to compete, we must offer solutions that are simple, reliable, and user-friendly, without adding to their burden.
Practical Tips
Where do we go from here?
First, it’s important to prioritize digital resilience. Educate your organization about the risks of relying on foreign platforms and explore the European alternatives available. You might ultimately choose non-European solutions if they’re more cost-effective or convenient. But awareness of the options is the first step toward resilience. Start small but start now. This applies to organizations seeking digital autonomy and companies treating sovereignty as a business opportunity.
Second, treat autonomy as a competitive advantage. Just like your sustainability goals, as mentioned in our previous article, embed digital sovereignty at the core of your platform or business. This ensures resilience, no matter what, and supports the broader European ecosystem. You should view autonomy as an investment in a volatile world, rather than an extra cost. Prioritize digital sovereignty now or risk losing your business to unforeseen disruptions.
Case Study: Autonomy in Practice
Last month, we attended the Mistral AI Now Summit virtually. As one of Europe’s few rapidly growing AI alternatives to global tech giants, Mistral embedded sovereignty from the beginning. Mistral promotes European values like multilingualism and embeds principles such as open-source and transparency at its core, using them as technical differentiators.
Mistral is therefore the perfect example that demonstrates that autonomy can be built into the product, not just the policy.
The SWIFT financial system presents a different reality. While it’s based in Belgium, its hardware depends on external providers. We can no longer take old realities for granted. Europe needs financial transactions that are fully controlled on its soil, that are immune to sudden shutdowns, especially for critical infrastructures like SWIFT.
The conversation around digital autonomy, and its solutions, is far from perfect. But we must treat it as a reality. By collectively pushing for European alternatives, we can grow their scale and improve their services. Engage your colleagues, procurement teams, and partners in this conversation. Digital sovereignty is here to stay, and it’s up to us to shape it.
If you’re curious about the topic, and wish to read more about the discussion we had at our event in March, have a read here: Verslag: ‘Digital autonomy: turning strategic independence into business opportunity’ - Kenniscentrum Data & Maatschappij
Funded by the European Union and the state of Brussels Innoviris. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the Brussels Capital Region-Innoviris. Neither the European Union nor the Brussels Capital Region-Innoviris can be held responsible for them.
🖋️Alexandra Osintseva
Digital Autonomy: Act Now or Face the Kill Switch