Only one-third of Nordic organizations feel in control of their critical data – a majority plan to increase sovereignty investments

Nordic technology company Vivicta’s new report, based on responses from 320 decision-makers  across the Nordics, found that only 29 percent strongly agree that they have sufficient control over critical data. While 70 percent expect sovereignty investments in organizations to increase over the next 12 months, only 46 percent have a formal sovereignty strategy in place.

In this context, digital sovereignty refers to an organization’s ability to retain control over its critical data, technology and digital services, even when business conditions change.

The findings suggest that while sovereignty has become a priority for Nordic organizations, strategy and execution have not kept pace.

“It’s clear that sovereignty has become an increasingly important priority in the current geopolitical environment. Nordic societies and businesses are built on trust and resilience, and these strengths increasingly depend on having control over critical data, infrastructure and technology. Digital

sovereignty has become a leadership priority linked to business continuity and risk management, and it’s no longer seen as just a compliance issue,” says Satu Kiiskinen, CEO of Vivicta. 

Applying sovereignty where it matters most

The study suggests that Nordic organizations are not aiming for maximum sovereignty across all operations, but are applying different levels of sovereignty based on business criticality. For critical workloads, EU or regional sovereignty is the most common preference (23%), while 17 percent favour a workload-based approach with different levels of sovereignty. Only a minority consider standard global cloud environments sufficient for their critical workloads.

“Most Nordic organizations are focusing on greater sovereignty in the areas that are most critical to their business. This is reflected in demand for local, certified and audited environments, as well as the ability to deliver critical services from within the Nordic region,” says Kiiskinen.

Dependence on cloud services and third-party providers appears to be the single biggest barrier to greater sovereignty, identified by 28 percent of respondents.

“Looking ahead, we expect more balanced hybrid models to emerge, combining the scale and strengths of global technology platforms with higher levels of control where it matters most. Ultimately, sovereignty is about freedom of action: the ability to remain in control when technology, suppliers or circumstances change. Organisations that find the right balance will be better positioned to innovate, grow and manage risk simultaneously,” Kiiskinen concludes.

Key findings from the Nordic Digital Sovereignty Survey 2026

• Ambition outpaces execution. Only 29 percent strongly agree they have sufficient control over critical data; 70 percent expect sovereignty investments to increase over the next 12 months.
• Organizations seek a balanced approach. Sovereignty requirements vary by workload. Only 8 % believe standard cloud environments are sufficient for critical workloads, while 23 % prefer EU or regional sovereignty and 17 % favour a hybrid approach tailored to workload criticality.
• Provider dependencies present the biggest barrier. Dependence on cloud services and third-party providers ranks as the leading obstacle to greater sovereignty (28%).
• AI is becoming a new sovereignty priority. More than one-quarter (27%) identify AI, data usage and decision-making control as key areas of focus.
• The Nordic countries have different starting points. Sweden is ahead in formal sovereignty strategy adoption, whereas Finland leads in planned sovereignty investments.

About the Nordic digital sovereignty survey 2026

The Nordic Digital Sovereignty Survey 2026 is a research initiative by Vivicta, conducted in collaboration with Kairos Future. The survey gathered responses from 320 senior decision-makers and key advisers in Finland, Sweden and Norway during June-July 2026. All respondents represent organisations with more than 500 employees and influence decisions related to IT infrastructure, data governance, AI or technology strategy.

Download the full report: The State of Digital Sovereignty in the Nordics

For more information, please contact Vivicta’s news desk: news@vivicta.com, +358 40 704 1411

Vivicta is a trusted Nordic transformation partner making everyday easier through technology. In a world of constant change, we are with our customers, helping to unlock new digital opportunities and elevate their business. We provide fit-for-purpose digital solutions to accelerate customers’ transformation. Our 7000+ experts globally drive end-to-end excellence across Data, Automation & AI, Cloud & Infrastructure, ERP & Applications, and Digital Security. With a get-it-done attitude, we commit to deliver elevated impact. www.vivicta.com

Enabling Digital Sovereignty 
Vivicta helps organizations stay in control of their critical data, AI, applications and services as regulations, business needs, and operating environments evolve. By combining Nordic expertise in cloud, AI, cybersecurity, and managed services, we enable customers to strengthen their resilience, reduce dependency risks, and make informed decisions about where and how their critical digital assets are managed.