Digital sovereignty: how organizations harness innovation and retain control

With a small number of global providers dominating the technology market, the issue of dependencies is increasingly be raised. Digital sovereignty is, in turn, becoming ever more important for public authorities, companies and organizations: how can innovation be harnessed without losing control over data, systems and critical processes? The Swiss Post Digital whitepaper explores this question and shows how organizations can strengthen their capacity to act.

Digital sovereignty isn’t a question of “either or”

There are various definitions of “digital sovereignty”. The basic idea is that organizations should be able to use digital technologies independently and retain control over their data and systems. However, as Prof. Dr Matthias Stürmer, Head of the Institute for Public Sector Transformation at Bern University of Applied Sciences (BFH), points out in the interview, it’s not about self-sufficiency: “Digital sovereignty doesn’t mean isolation, but freedom of choice.”

The whitepaper features insights from Matthias Stürmer and David Rosenthal. Both experts share their perspectives on the topic. What becomes clear is that digital sovereignty isn’t a question of “either or”: it’s not about achieving complete independence, but managing dependencies consciously, recognizing risks and strengthening organizations’ capacity to act.

Four principles for more digital sovereignty

Digital sovereignty isn’t an abstract concept. Organizations can strengthen it with specific measures. The whitepaper describes four key areas of action:

• Identify critical data: Not all data is equally sensitive, so organizations should classify their information according to protection and regulatory requirements. Only by knowing which data is sensitive can the right protective measures be taken.
• Protect data effectively: Strong encryption, proprietary key management, zero-trust architectures and clear access and authorization concepts form the basis for protecting data. They help organizations retain control over their data – regardless of where it is processed or stored.
• Create alternatives: Digital sovereignty also means being prepared for changes. Open interfaces, established standards and planned exit scenarios reduce dependency on individual providers and create the necessary flexibility.
• Strengthen competencies within the company: Technology alone doesn’t create digital sovereignty. Employees and managers who understand the opportunities, risks and dependencies and can make well-founded decisions are crucial. Knowledge and expertise are becoming key success factors.

Putting theory into practice

The whitepaper uses specific examples to show how these principles can be implemented in practice. Swiss Post Digital supports organizations with solutions for secure digital communication, protected data exchange and the operation of digital platforms. One example is the Civetica Cloud, an e-government platform that combines municipal administration processes in an integrated environment and stores data exclusively in Switzerland. In doing so, it helps organizations comply with regulatory requirements and retain control over their data and processes.