India’s digital sovereignty debate is still trapped in a misleading image: the server. For years, the public conversation around digital sovereignty focused on where data physically sits. If Indian data is stored inside India, we assume India is sovereign over it. That assumption made sense in an earlier internet era. It is no longer sufficient in the age of cloud computing and artificial intelligence.
Today, the more important question is not where the server sits, but who controls the command layer governing it. The “command layer” sounds technical, but the idea is simple. It refers to the software and governance systems that decide who can access data, who can update systems, who controls encryption keys, who can shut systems down, and under whose laws these systems ultimately operate.
A useful analogy is modern aviation. An airport may physically belong to India, the aircraft may carry Indian passengers, and the pilots may be Indian, but if air traffic control systems and navigation dependencies remain externally governed, operational sovereignty becomes conditional. The same logic increasingly applies to digital infrastructure.
India has built extraordinary digital public infrastructure over the past decade. UPI, Aadhaar, DigiLocker, and other systems have demonstrated that India can build population-scale digital platforms with remarkable efficiency. Emerging economies across the world are studying the India Stack model seriously. But there is a difference between building digital roads and controlling the traffic system beneath them. This distinction matters more in the AI era because the focus of digital sovereignty is increasingly shifting from data to compute. The countries controlling advanced chips, cloud infrastructure, foundational AI models, and large-scale compute capacity will shape not only markets but governance itself.
Consider a plausible future scenario. India’s welfare systems, public examinations, healthcare platforms, agricultural advisories, and financial infrastructure increasingly integrate AI systems into governance. The applications may be Indian. The users may be Indian. The data may even sit inside India. But if the compute infrastructure, orchestration systems, foundational models, or encryption keys and governance systems underneath them remain dependent on external providers, India’s operational autonomy becomes fragile during moments of geopolitical stress.
The Russia-Ukraine conflict demonstrated that technology infrastructure is no longer neutral plumbing. Payment systems, satellite networks, semiconductor access, cloud services, and digital platforms all became instruments of geopolitical conflict. The United States has repeatedly used export controls and technology restrictions as strategic tools, particularly in semiconductors and AI compute. Europe, despite being closely aligned with the United States, has accelerated sovereign cloud initiatives because it recognises the long-term strategic risks of excessive dependence on externally governed digital infrastructure. This is no longer a fringe nationalist debate. It is becoming mainstream statecraft.
Also read: India can’t rely on global tech giants for its digital systems. Prioritise sovereignty
The people problem behind digital sovereignty
Let us shift to a higher order challenge. We know the technological challenges, but we haven’t imagined who will solve them. Who will build India’s secure distributed systems? Who will audit AI models used in governance? Who will design trusted computing infrastructure? Who will understand the intersection of technology, cybersecurity, law, geopolitics, and public systems? At present, Indian engineering education is not adequately designed for this challenge.
For decades, India optimised technology education around a highly successful economic model: supplying software talent to the global IT industry. That strategy delivered enormous benefits. It created jobs, exports, and global credibility. But it also shaped institutional incentives. Engineering education became heavily oriented toward coding proficiency, placements, application development, and integration into existing global systems.
As a result, India became exceptionally good at producing users and implementers of global technology systems, but invested far less in producing builders of foundational systems. India produces large numbers of software engineers, but relatively fewer operating systems researchers, distributed systems architects, cryptography experts, semiconductor scientists, AI infrastructure specialists, and protocol designers.
Even AI education in India is becoming excessively application-centric. Students are encouraged to build AI startups and consumer tools, but far less attention is paid to compute infrastructure, GPU dependencies, model governance, energy systems, or AI security. Yet in the AI era, compute itself is becoming part of the command layer. Hence, the future sovereign technologist cannot think only like a software developer. The future policymaker cannot remain technologically illiterate. India increasingly needs institutions capable of producing people who can think simultaneously about distributed systems, public policy, AI governance, cybersecurity, economics, and geopolitics.
That requires a shift in how universities imagine their role. Universities cannot remain merely talent suppliers for existing technology ecosystems. They must become laboratories for strategic technological capability. India needs stronger research ecosystems in distributed systems, semiconductors, cybersecurity, cryptography, and AI infrastructure. It needs interdisciplinary centres where engineers work alongside legal scholars, economists, and public policy experts on real governance problems emerging from the digital state.
Let’s not panic. The real risk for India is not sudden digital collapse. India’s digital ecosystem is already too large and sophisticated for simplistic alarmism. The greater risk is subtler: becoming permanently dependent at the foundational layers of the AI and digital economy while believing that surface-level localisation alone constitutes sovereignty. India has successfully built digital roads for a billion people. The next question is whether it will also control the traffic system beneath them.
Suresh Prabhu (@sureshpprabhu) is a former Union Cabinet Minister and Shobhit Mathur (@shobweet) is the co-founder and vice-chancellor of Rishihood University. Views are personal.
(Edited by Prashant Dixit)