Latest / The Emerging Markets Podcast with Fexingo: Developing Economies, Growth, and Investment / How Emerging Markets Are Building Cloud Sovereignty
Transcript
- Lucas: So earlier this month, the Indian government effectively blocked a Google Cloud contract with a state-owned telecom operator — citing data sovereignty risks. The deal was worth maybe $30 million, but the message was way bigger than the dollar figure. Luna: Yeah, I saw that. It wasn't a formal ban, but the Department of Telecommunications essentially said no until Google could guarantee that sensitive data wouldn't touch servers outside India. Lucas: Exactly. And that's the heart of what we're seeing across emerging markets right now — a push for what's being called 'cloud sovereignty.' Countries like India, Indonesia, Brazil, even Vietnam are passing laws or issuing executive directives that force global cloud providers to build local infrastructure, partner with domestic firms, or risk losing access to entire government and financial-sector markets. Luna: I think a lot of listeners hear 'cloud sovereignty' and assume it's just about privacy. But it's also economic strategy, right? These countries don't want their most valuable data — and the tax revenue from it — flowing out to Virginia or Dublin. Lucas: Right. Look at India's Digital Personal Data Protection Act, which came into full effect this year. It requires that all 'critical' personal data — health records, financial info, biometrics — be stored and processed only within India. And it gives the government the power to designate any data category as critical at any time. Luna: That's a pretty broad authority. So any global bank or tech firm operating in India basically has to build or lease data center capacity inside the country, or they can't serve Indian customers. Lucas: Exactly. And India's cloud market is projected to grow at a 23 percent compound annual growth rate to about 28 billion dollars by 2028. So the incentive to comply is enormous. AWS, Azure, and Google Cloud are all racing to open new regions in India — AWS alone has committed to investing over four billion dollars in its Hyderabad and Mumbai data centers by 2030. Luna: But it's not just India. Indonesia passed Government Regulation 71 in 2024, which requires all government data to be stored onshore, and mandates that cloud providers use local 'fourth-party' auditors to certify compliance. That's a pretty heavy operational requirement. Lucas: And Brazil's LGPD — the Lei Geral de Proteção de Dados — has been stepping up enforcement. This year, the Brazilian data protection authority fined a major local bank for transferring customer data to a us based cloud without adequate safeguards. The fine was only about two million dollars, but the reputational damage and regulatory scrutiny were significant. Luna: So what does this mean for the big three — AWS, Azure, Google Cloud? Their whole business model is global scale, centralized management. Localization adds cost and complexity. Lucas: It does. But they're adapting. Microsoft launched its 'Azure Sovereign Cloud' offering last year — essentially a physically and logically isolated version of Azure that runs entirely within a country's borders. They've already deployed it in Singapore, Switzerland, and India. Google announced something similar called 'Google Distributed Cloud' for regulated industries. Luna: And AWS has its 'Outposts' and 'Local Zones' — but those are more about edge computing than full sovereignty compliance. I wonder if the real winner here might be local cloud providers. Lucas: That's the interesting angle. In India, you have companies like Reliance Jio and Tata Communications building their own cloud platforms. Indonesia has PT Telkom's 'Telkom Cloud'. Brazil has 'Cloud da Gente' from the state-owned Serpro. These local players argue that they can offer sovereignty without the geopolitical strings attached to us based providers. Luna: But can they match the reliability and security of AWS or Azure? Because for a bank or a hospital, uptime and data integrity aren't negotiable. Lucas: That's the open question. Some can — Jio's cloud is built on a partnership with NVIDIA for AI workloads, so it's credible. Others are still maturing. But the regulatory push gives them a captive market, which helps them scale. A report from Gartner earlier this year estimated that the global sovereign cloud market will hit 200 billion dollars by 2030. Luna: That is a massive number. And it's not just about data centers — it's about the whole ecosystem: security, consulting, managed services. Who captures that value depends on how these regulations evolve. Lucas: Look, if walking through this cloud sovereignty shift with us has made something click for you — if it was worth a coffee — honestly, that's the link. It's buy me a coffee dot com slash fexingo. No pressure, just a low-key way to keep this show ad-free. Luna: Yeah, and we really appreciate those who do. It means we don't have to sell sponsorships, and we can keep drilling into topics like this one. Lucas: So where does this leave the global providers? They're stuck between two pressures: one, they need to comply with local sovereignty laws to access these growing markets. Two, they need to maintain their global architecture and margins. Luna: And the customers — the banks, the telecoms, the governments — they have to navigate this patchwork of regulations. A bank operating in India, Indonesia, and Brazil faces three different compliance regimes. Lucas: Right. That complexity actually creates a business opportunity for consulting firms and for the cloud providers themselves — if they can offer a unified 'sovereignty layer' that adapts to each country's rules. That's what Azure Sovereign Cloud is trying to do. Luna: But there's a geopolitical angle too. The US government has expressed concern that data localization makes it harder for law enforcement to access data for counterterrorism. And China's cloud providers — Alibaba Cloud, Huawei Cloud — are offering sovereign solutions that align with Belt and Road countries. Lucas: That's a real tension. The US has criticized data localization as a form of digital protectionism. But from the perspective of an emerging market, it's about sovereignty and developing a domestic tech industry. I don't see this trend reversing. Luna: So what's the one thing you'd tell a listener to watch in the next 12 months? Lucas: Watch India. The government is expected to release a list of 'critical data' categories later this year. If financial transaction data or UPI payment data gets classified as critical, that will force every global fintech operating in India to completely restructure their data architecture. That would be a massive catalyst for the sovereign cloud market. Luna: And it would also test whether the local cloud players can handle the scale. Because UPI processes over 10 billion transactions a month. That's not a small proof of concept. Lucas: Exactly. And that's the real story here — the intersection of regulation, infrastructure, and market scale. Emerging markets are no longer just consumers of cloud technology. They're shaping its future architecture. Luna: And they're doing it on their own terms. Lucas: Yeah. On their own terms.