Trust is the new uptime: Why sovereignty by design matters

When coupled with thoughtful service design, digital capabilities can improve how citizens and business interact with government, strengthen decision making, and enhance productivity. As a result, they are becoming become central to delivering simple, secure, and connected government services.

With this shift, trust is emerging as a new measure of success. The success of a digital transformation can no longer be judged solely by whether services and systems work, but by whether people trust how they work.

This is where sovereignty enters the conversation.

Too often, sovereignty is framed as a question of ownership, vendor origin, or compliance. A  more helpful perspective is to view it as an organisation's ability to exercise meaningful control over critical services, systems, data, and capabilities, especially when circumstances change.

A useful question for government leaders to ask is: If we lost control of, or access to this service, system, data, or capability, what would the consequence be? Have we designed for this?

The answer helps shift the discussion from ideology to identifying opportunities to improve the design and governance of an organisation and its services and systems.

In this context, sovereignty is not a constraint on innovation; it is a valuable design principle that helps organisations modernise while preserving confidence, trust, resilience, and flexibility.

When enacted, sovereignty by design requires organisations to make deliberate choices early in the formation of their strategy and operating model to promote trust, resilience, accountability, and long-term flexibility.

As governments accelerate digital transformation programs and explore the use of AI, public confidence remains fragile. Research conducted by the University of Melbourne and KPMG found Australia ranks lowest of all countries surveyed in the belief that the benefits of AI outweigh the risks, with only 30 per cent of respondents believing this to be the case. If organisations cannot explain how decisions are made, demonstrate accountability, or maintain appropriate control over systems, data, and services, public trust can erode regardless of how quickly technology is deployed or how well it works.

Additionally, the risk landscape has shifted. Today, agencies must consider geopolitical dependencies, vendor concentration, retained workforce capability, data governance, and the growing influence of AI-driven decision-making.

Lastly, technology can amplify strengths and weaknesses. If services are fragmented, governance is weak or accountability is unclear, digital transformation can accelerate those problems and make them harder to detect.

While previous waves of transformation tended to focus on modernising the machine and efficiency, these factors require us to rethink how value is created, governed, and sustained. Agencies that do this well tend to have four characteristics in common.

1. Anchor sovereignty in strategy: Beyond a vision statement, they understand their role, what the transformation needs to enable, what's blocking success, and how they will organise themselves to enable the strategy.

2. Define guardrails early: Clear boundaries around risk tolerance, data use, decision rights, and the prioritisation of competing ethical principles let teams work cohesively while remaining aligned to organisational values and public expectations. As guardrails reflect the values and expectations of the society we serve, understanding why they exist at every level of the organisation is what makes them enduring and effective, rather than being worked around.

3. Design for flexibility: Modular architectures and designs, as well as decoupled systems, reduce dependency, limit lock-in, and make it easier to introduce new capabilities incrementally without destabilising critical services. This is advantageous in any environment; however, it is especially important where legacy platforms, regulatory change, and hybrid hosting increase complexity.

4. Retain internal capability:  Partners play an important role; however, organisations must maintain expertise in areas that require judgement and accountability to ensure they understand how decisions are made and to direct future efforts.

A common misconception about sovereignty is that it requires governments to own everything themselves. In practice, this approach can be costly and ineffective. The real challenge is not ownership; it is dependency. Agencies can use global providers and maintain sovereignty if they design for control, flexibility, retained expertise, and accountability. Conversely, organisations can work with local providers and still lose sovereignty if they become locked into systems they cannot understand or change.

This is why governments should treat sovereignty as a systems challenge, not just a technology issue. As it spans procurement, governance, workforce strategy, architecture, data management, and national resilience, no single team can solve it in isolation.

The challenge for leaders is that sovereignty often asks organisations to invest in risks that have not yet materialised. Digital transformation has often prioritised efficiency or tangible short-term benefits because it is difficult to quantify the risk of dependency, geopolitical exposure, AI lock-in, or loss of institutional capability. Conversely, designing for sovereignty may require greater spending upfront to build modularity and workforce capability, or avoid tightly integrated proprietary ecosystems.

For leaders looking to embed sovereignty by design, asking questions from various perspectives is key.

What is your strategy? How does your environment shape your strategy? What unique role does your agency play? What barriers are preventing success today? How do you organise yourself to enable the strategy? And what dependencies or vulnerabilities remain hidden within your ecosystem? The answers will sharpen investment decisions, governance structures, and transformation priorities.

Sovereignty becomes practical if it is anchored in strategy and expressed through coordinated efforts to identify and address unexamined vulnerabilities.

In an era where public trust is a key measure of transformation success, sovereignty is no longer a policy discussion. It is a strategic design principle that can help governments strengthen resilience, improve accountability, and retain control where it matters most.

In the future of public services, trust may prove to be the new uptime.