Recently, I’ve noticed that the discussion in Canada about digital sovereignty mainly revolves around borders. It focuses on where code is written, where data is stored and whether a solution is built domestically. While these factors are important, they don’t form the basis of true independence.

Digital sovereignty is not defined by geography alone, but by governance. This includes who manages the technology, who gets access to it and under what circumstances. The danger is that a borders-only view of security can create a false sense of safety while limiting Canada’s access to the innovation it needs to remain competitive on the global stage.

In my work across the Canadian technology ecosystem, I’ve seen digital sovereignty move to the centre of the debate. But the terrain is shifting quickly, as AI and cloud systems become increasingly woven into public services, economic infrastructure and national security. This raises the stakes for how these technologies are governed, posing a critical question: how do we build an infrastructure that can evolve with Canada’s needs?

No country can afford to independently develop an entirely new technology stack, but governments and commercial entities do require sovereign control over their own data and infrastructure. With technology moving this fast, the answer lies in making our systems open, interoperable and flexible. It's up to policymakers, public-sector leaders and enterprise decision-makers to ensure those principles are the foundation of how technology is selected, used and regulated, not an afterthought.

The Government of Canada is already setting a more ambitious standard. Federal policy defines digital sovereignty as the ability to govern, secure and direct digital systems regardless of where technology is developed or hosted. The focus is on operational resilience, system integrity and institutional control, not artificial boundaries. It recognizes that complete autonomy is neither realistic nor desirable in a globally connected world. It accepts that Canada will continue to rely on a mix of domestic expertise and trusted global technologies. I don’t see this as a compromise. I see it as a pragmatic, forward-looking approach for a country that competes internationally and builds strength through global partnerships.

This broader, governance-first view of digital sovereignty reflects how I (and other Canadian technology leaders) see our role. Canada is home to world-class research, engineering and innovation talent. Those of us leading operations nationwide understand that sovereignty must ultimately serve Canadian priorities. We live and work in this country. Our teams, clients and partners are all here. We want Canada to lead, but leadership doesn’t come from limiting options. It comes from giving all organizations the control, flexibility and tools they need to shape their own digital futures.

That perspective comes directly from the urgent and practical questions we see Canadian organizations facing every day: Who has access to our data and under what conditions? Can we confirm how our AI systems make decisions? Are we able to change course quickly if needed? These are the real tests of sovereignty, and they cannot be answered by data location alone.

True digital sovereignty is built through system design. It requires ownership of encryption keys and strong governance across the AI lifecycle. It also means freedom from vendor lock-in and the adoption of open, interoperable architectures. Together, these capabilities give Canadian institutions the power to evolve and innovate without compromising their autonomy.

Canada has the expertise, talent and ambition to define a modern model of digital sovereignty that reflects our national values while staying globally competitive. But that leadership will not emerge by default. Around the world, governments and institutions are moving quickly to embed transparency and choice into their digital frameworks. If Canada hesitates, there will be real consequences measured in terms of reduced resilience, constrained innovation and diminished influence in shaping the technologies that support our economy and public services.

This is the conversation Canada needs to have now across government, industry and the broader ecosystem. Building true digital sovereignty requires collaboration between policymakers and practitioners who understand how digital systems work in the real world. At IBM, we see this every day in our work with Canadian institutions, and we believe a governance-first approach offers a practical, forward-looking path. The decisions made in the months ahead will shape Canada’s digital autonomy for decades. We have the chance not just to participate in global innovation, but to lead it.