IBM’s announcement differs from Cisco’s licensing-focused approach. “A fundamental architectural shift is required: one where sovereignty is an inherent property of the platform itself, not a contractual promise or deployment variant,” IBM says.
The approach IBM espouses is based on three principles it laid out, beginning with the notion that sovereignty is a platform capability, and it must be provable.
“With IBM Sovereign Core, sovereignty is enforced architecturally, not contractually,” IBM says. It is built on what is calls “transparent technologies” like Red Hat OpenShift. Sovereign Core likewise operates in an air-gapped environment that functions like SaaS but is fully under the customer’s authority.
“Identity, encryption keys, logs, telemetry and audit evidence remain entirely within the sovereign boundary. Ongoing compliance capabilities are embedded directly into the software, enabling organizations to produce regulator-ready proof on demand, without manual, audit-driven processes,” IBM says.
IBM’s second principle is that AI sovereignty is a first-class system property. Its approach enables organizations to deploy CPU- and GPU-based clusters, and approved open or proprietary models, all governed through controlled gateways. “AI inference and agent-based applications run locally, without exporting data or telemetry to external providers,” IBM says. Operational activity is continuously monitored and recorded, “creating a clear audit trail for AI systems operating in high-impact and regulated domains.”
Thirdly, sovereignty is to be operationalized for speed and scale. A single customer-operated control plane enables customers to centrally operate “thousands of cores and hundreds of nodes with different sovereign requirements,” IBM says. Automated configuration is built in, ensuring identity, security, and compliance, while self-service provisioning for CPU, GPU, VM, and AI inference environments eases deployment.
