Building strategic technology resilience tailored to your needs

PwC Belgium Technology Sovereignty Centre

Tech sovereignty centre

Technology sovereignty is the capacity of an organisation to decide, act and operate its technology ecosystem without being subject to unilateral decisions by external actors or technical systems outside its control or jurisdiction.

It is not a binary state, nor does it equal keeping everything in-house. It is a gradient, measured by how much of a decision remains yours: whether you can see what you depend on, verify that commitments are kept, keep a service running when conditions turn adverse, and change course without unacceptable cost.


Why is it important today?

Today, technology underpins everything an organisation does: operations, services and the most critical processes all depend on technology systems and software owned and controlled by third-party providers. More than 80% of the key digital products, services and infrastructure that EU businesses and administrations rely on every day originate outside the EU, accounting for over €260 billion spent annually on services that offer users limited control and transparency.1

 

The seven layer technology stack A living stack - every layer is grown, carried and constrained by the one beneath it Layer 1: Critical resources 1 Critical resources Critical raw materials, mining, refining and logistics Energy generation, transmission grids and water Layer 2: Chips 2 Chips Chip design, fabrication capacity and advanced packaging Lithography equipment and specialist materials Layer 3: Networks 3 Networks Fibre and mobile networks, subsea cables and satellites Internet exchanges and routing infrastructure Layer 4: Internet of Things and devices 4 Internet of Things and devices Connected sensors, endpoints, vehicles and industrial assets Edge compute and device level security Layer 5: Cloud 5 Cloud Data centres, cloud services, storage and data spaces Jurisdictional control over where data resides Layer 6: Software 6 Software Business applications, operating systems and open source Digital platforms and developer tooling Layer 7: Data and artificial intelligence 7 Data and artificial intelligence Models, compute capacity, training data and algorithms Governance of applied AI and autonomous systems

This dependency is rarely confined to a single layer. Technology is a stack, built from the bottom up: supply chains that source and move critical components, the physical infrastructure that houses them, the chips that provide raw computing power, the cloud and software layers that run on top, and increasingly the AI models built on all of it. Each layer relies on the ones beneath it, and control at one level means little if the layers below can be restricted, withdrawn or altered by an external third party.

In this scenario, when supply, availability or access sits in the hands of a third party, technology sovereignty is no longer a side consideration and becomes a strategic priority. And because a chain is only as strong as its weakest link, a single vulnerable layer can expose the whole structure.


1Bria, F., Timmers, P., & Gernone, F. (2022). Digital industrial policy for Europe. Centre on Regulation in Europe. https://cerre.eu/wp-content/uploads/2022/12/Digital-Industrial-Policy-for-Europe.pdf


Our vision for practical sovereignty

A growing number of companies and public administrations have recognised the importance of reaching higher levels of technology sovereignty maturity. PwC’s 2025 EMEA Cloud Business Survey shows that 82% of organisations are refining their cloud approach in response to geopolitical and/or regulatory change.

Ensuring a resilient organisational technology ecosystem is about knowing exactly where your dependencies lie, which of them are critical, and how to govern your technological interdependencies with confidence.

That’s why at PwC Belgium, we approach this through three different lenses:

Most organisations sit at different points for different workloads. The goal is not maximum sovereignty everywhere, but a level of control that matches what each workload actually does. For an agile and cost-effective approach, the starting point is to analyse and classify the processes, workloads, data sets and services where dependency would have the greatest impact on continuity, compliance, security, public trust or business operations.

Much of this can build on assessments organisations already have: business impact analyses, critical-function mappings and regulatory classifications under frameworks such as NIS2 and DORA, rather than starting from scratch. The outcome is a prioritised view of where sovereignty matters most.

Resilience planning in an organisation starts the moment you acknowledge where you actually depend on others: external providers, proprietary ecosystems, specific suppliers, cloud layers, hardware components or skills that would create strategic or operational exposure if suddenly discontinued.

Those dependencies rarely stand alone: they stack, and concentrate, so that a single provider or component can sit beneath several seemingly unrelated systems. Mapping them makes the hidden concentration visible and turns assumed resilience into something actually verifiable.

Sovereignty is not simply a property of the product or service you buy: it only holds if the provider behind it is contractually committed to preserving it. That is why procurement and vendor management are where sovereignty is either secured or lost, and why the conversation has to move beyond functionality and price to control, auditability and portability.

In practice, we support organisations in embedding sovereignty into buying decisions by answering three questions:

  1. What do you ask for, and how do you ask for it?

    Explicit requirements, award criteria and sovereign-by-design specifications turn broad sovereignty ambitions into obligations a supplier can be held to. We help you translate those ambitions into tender and contract language that is precise enough to evaluate and enforce.
  2. How do you keep control for the duration of the relationship?

    Transparency obligations, audit and reporting rights, as well as notification duties on subcontracting, ownership and material change let you verify that commitments are still being met and not simply asserted at signature. We help you negotiate those rights into the contract and, just as importantly, build the governance to actually exercise them once the relationship is running.
  3. How do you get out if you need to?

    Proven portability mechanisms, clear exit provisions and contingency obligations make leaving technically feasible, operationally realistic and cost-effective. And because an exit plan only counts if it still works under pressure, we help you stress-test it through reversibility and exit simulations and periodic reviews as the service, the supplier and your own architecture evolve.

These considerations apply to private and public buyers alike, though public procurement brings its own procedures and legal limits. See how we help public sector buyers embed sovereignty into their tenders.

 

Discover our areas of expertise

Your technology stack is only as sovereign as its weakest layer, and no single specialist covers them all. This is why our Technology Consulting practice gathers experts in cloud, data, AI, cyber, EU regulation, open source and the public sector. Explore the domains where they turn sovereignty from a principle into a decision:

Cloud and data sovereignty

Embed cloud sovereignty into strategy and architecture to balance innovation and control.

Cybersecurity

Resilience and security of systems as the foundation of sovereign operations.

Public sector and EU Regulation

Sovereignty considerations specific to government and public services and the impact of EU legislation on the future of your operations.

AI adoption

How to adopt AI in a responsible and sovereign way.


Connect with PwC Belgium

Required fields are marked with an asterisk(*)

Describe your situation or need

Your personal information will be handled in accordance with our Privacy Statement. You can update your communication preferences at any time by clicking the unsubscribe link in a PwC email or by submitting a request as outlined in our Privacy Statement.

Contact us

Xavier Verhaeghe

Xavier Verhaeghe

Managing Partner Advisory, Technology Consulting & Innovation, PwC Belgium

Tel: +32 495 59 08 40

Michiel De Keyzer

Michiel De Keyzer

Director, PwC Belgium

Tel: +32 494 88 95 74

Nicolas Loozen

Nicolas Loozen

Director, PwC Belgium

Tel: +32 494 19 61 76

Natacha Dewyngaert

Natacha Dewyngaert

Director, PwC Belgium

Tel: +32 472 51 28 25

Hide