At least 15% of nations in volatile geopolitical regions will establish formal data embassy agreements by 2029 to ensure continuity of government services and operations, according to Gartner, Inc. This reflects a notable shift from today’s baseline, where only a few nations have adopted formal data embassies.

A data embassy is a legally protected enclave that enables a nation to host critical digital infrastructure on foreign soil while retaining full sovereignty and control over its data.

“Rising geopolitical instability, cyber threats and concentration risks associated with data localisation are prompting governments to move beyond traditional sovereignty models centered on data residency,” said Daniel Nieto, Sr. Director Analyst at Gartner.

“This shift is increasing focus on resilient operational strategies such as sovereign dispersion, which decouple critical data, applications and infrastructure from physical geography while maintaining sovereignty through legal jurisdiction.

“Data embassies are emerging as a practical approach to sovereign dispersion. They reduce concentration risk, eliminate single points of failure and help governments maintain continuity of critical state functions beyond national borders while retaining full legal control over their systems and data.”

Through bilateral agreements, governments can host critical systems in another country while ensuring those systems remain under the jurisdiction of the originating state. Security is maintained through strong end-to-end encryption, with decryption keys retained solely by the home country.

Recommended reading

• Can Europe ‘Trump-Proof’ Its Cloud Services?
• Open Rights Group Urges UK to Ditch US Tech in Data Sovereignty Push
• UK&I SMEs Are Concerned About Data Sovereignty
• UK IT Leaders Shift Cloud Strategy Over Data Sovereignty Concerns
• Security, Compliance, AI Concerns Driving Private Cloud Adoption

Supporting Continuity During Black Sky Events 

As digital systems become critical instruments of statehood, operational resilience will increasingly depend on legal control of data rather than its physical proximity.

“Critical government registries, including civil status records, property titles, tax records and fiscal ledgers, can be replicated in secure external environments and function as synchronised extensions of core government systems,” said Nieto. “This helps ensure that data remains available and services can continue during a black sky event, when critical national infrastructure and government systems are severely disrupted or incapacitated.”

For highly sensitive defense and intelligence systems, governments require additional safeguards, including post-quantum cryptography and zero trust architectures. These measures help ensure critical systems remain secure even when hosted beyond national borders.