AI Platform and Security · Whitepaper

Chapter 13 · Infrastructure

Infrastructure, Compute and European Digital Sovereignty

Key insights from Chapter 13 of "AI Platform and Security"

Author Conceived and directed by Gunnar Nordqvist; text written by AI agents under his direction.
Published 1 November 2026
Build number 2026.11
devsecmlops ai-security agentic-architecture digital-sovereignty
Figure 13.1: Decision drivers (data classification and legal basis, third-country transfer exposure, latency and GPU capacity, cost and operational skill) feed a sovereignty decision matrix that places each workload on a spectrum from a hyperscaler region to on-premises confidential computing. Open-weight model choice and portable infrastructure code apply across all options.
Figure 13.1: Decision drivers (data classification and legal basis, third-country transfer exposure, latency and GPU capacity, cost and operational skill) feed a sovereignty decision matrix that places each workload on a spectrum from a hyperscaler region to on-premises confidential computing. Open-weight model choice and portable infrastructure code apply across all options.

This chapter opens Part III, on infrastructure, and asks where AI runs and who controls it, because every model and pipeline executes on someone's hardware under some jurisdiction's law. It covers scarce accelerator capacity, on-premises and hybrid inference, European cloud, Gaia-X and the EuroHPC AI Factories, data residency after Schrems II, confidential computing, sovereign model choices, and the infrastructure code that keeps placement a decision rather than an accident.

AI reverses part of the long trend towards abstracting where a workload runs. Training and inference depend on scarce, unevenly distributed accelerators; the data that flows through a model is often the most sensitive the organisation holds; and a European organisation's regulatory position depends on whether personal data leaves the European Economic Area, which cloud regions and support arrangements can cause without anyone intending it.

Digital sovereignty, in the sense this book uses, is the ability of European organisations to control their data, infrastructure, and models. It is not a synonym for on-premises but a set of properties: the organisation knows where its workloads run, can show which law governs them, can change provider without rewriting its estate, and can continue operating if a provider or jurisdiction becomes unavailable. The European Commission's AI Continent Action Plan frames compute capacity, data, and skills as the three resources Europe must secure to compete, and is explicit that compute is the scarcest (15, European Commission, 2025).

Primary topics explored

  1. Why placement is an architectural decision
  2. Accelerator scarcity and capacity planning
  3. Hybrid and on-premises inference
  4. European cloud, Gaia-X, and the AI Factories
  5. Data residency and third-country transfer risk
  6. Confidential computing

About AI Platform and Security

AI Platform and Security is Book 3 of The Transformed Architecture. It shows how large European enterprises and public authorities build, secure and operate the platform on which artificial intelligence runs: data, models and DevSecMLOps, retrieval and agents, infrastructure and sovereignty, AI security engineering, evaluation, observability and cost.

The companion volume AI Governance covers risk management, governance, assurance, organisation and leadership; Architecture as Code supplies the underlying discipline.

Who should read this

Platform engineers, security architects, MLOps teams, AI architects and technical decision-makers.

Portrait of Gunnar Nordqvist

Gunnar Nordqvist

Conceived, directed and published the books of The Transformed Architecture.

Continue with the full chapter

Read the full chapter online

Chapter 13: Infrastructure, Compute and European Digital Sovereignty in AI Platform and Security gives the detailed explanations, practical examples and implementation patterns behind this summary.

This whitepaper belongs to “Infrastructure” and is one of 29 drawn from the manuscript.