Veeam has launched a new Data Sovereignty program to help organizations identify trusted local service providers that combine sovereign operating capabilities with Veeam-powered data resilience and security. The Veeam Sovereign Service Providers Program will roll out in phases, starting with the Data Sovereignty Competency within its Veeam Cloud & Service Provider (VCSP) program.

The initiative aims to help customers assess service providers based on data location, operational control, access governance, and legal jurisdiction, while maintaining cyber resilience and recoverability. Veeam plans to introduce additional program offerings later this year.

Under the program, Veeam will provide the technical capabilities for sovereign data protection. Participating service providers will contribute local operating models, governance expertise, jurisdictional knowledge, and established market presence. Together, these capabilities are designed to address customer requirements for data control and regulatory alignment.

Demand for data sovereignty is increasing as governments and regulators introduce or develop rules covering data residency, access, control, portability, and jurisdiction. Geopolitical uncertainty, cross-border dependencies, and growing AI adoption are also prompting organizations to examine where sensitive data resides, who can access it, and which laws govern its use.

According to Michelle Graff, Senior Vice President, Global Partnerships at Veeam, sovereignty requirements vary according to regional government, legal, regulatory, and operational conditions. She said the program combines Veeam’s data protection technology with the local operating models and governance capabilities of trusted partners.

Graff added that the VCSP Data Sovereignty Competency provides customers with a clearer way to identify providers that have invested in both technical capabilities and sovereign operations.

The announcement follows research from Veeam, which found that 70% of organizations acknowledge that AI workflows interact with sensitive corporate data without full oversight. Meanwhile, 67% report that employees are creating autonomous AI workflows that IT teams cannot fully track.

As AI becomes more integrated into business operations, organizations face growing pressure to strengthen data governance, maintain local control, and ensure that sensitive information remains protected and recoverable.

The new competency will help customers identify service providers that meet defined criteria across operational, legal, technological, and governance requirements. These criteria include local operating models, jurisdictional controls, in-region personnel, data governance processes, customer oversight, and resilient data protection.

However, the competency does not replace a customer’s own legal, regulatory, risk, or compliance assessment. Instead, it recognizes provider capabilities against Veeam’s program requirements.

Veeam’s existing product capabilities, alongside continued investment in additional sovereignty features, will provide the technical foundation for participating partners’ services. The combined offering is intended to help organizations address current requirements while adapting to changing regulations and geopolitical conditions.

The Data Sovereignty Competency will also complement other VCSP competencies, allowing customers to select service providers based on their specific requirements. These include data sovereignty, disaster recovery as-a-service, and off-site backup.

According to the Gartner® Hype Cycle™ for Digital Sovereignty, 2026, digital sovereignty is becoming a board-level priority as geopolitical developments increase the risks associated with access to global infrastructure, services, and AI. The report highlights how limited control over technology infrastructure can expose organizations to potential operational disruptions.

Tim Pfaelzer, General Manager and Senior Vice President, EMEA at Veeam, said sovereignty has evolved from a compliance consideration into a strategic business requirement across Europe. He noted that organizations expanding their AI initiatives need greater certainty over data location, access rights, and applicable laws.

Pfaelzer added that combining Veeam’s technology with the local operating capabilities of service providers offers organizations a practical way to strengthen data control without compromising resilience or recovery.

Ahsan Khan, Chief Technology Officer at ThinkOn, also highlighted the importance of verifiable controls. He said sovereignty requires evidence of jurisdiction, residency, and control throughout the data environment. He added that this approach reflects the standards ThinkOn applies in Canada’s regulated sectors and its work with regulated customers across other markets.

Only service providers that meet the competency requirements will qualify for the program. Customers will be able to identify approved providers through Veeam partner profiles, which will highlight their data sovereignty capabilities, regional coverage, and competency status.

The VCSP Data Sovereignty Competency marks the first phase of the Veeam Sovereign Service Providers Program. The company plans to introduce further offerings later this year as it works with product teams and selected service providers to expand the initiative.

For more information about Veeam’s Data Sovereignty program, visit Veeam’s official website.

Related post

View all