A few months ago, an Indian startup found its cloud access suspended overnight. The company’s code, data, and customers were locked out not by a hacker, but by a foreign provider exercising its terms of service. For many, it was a wake‑up call: India’s digital economy may be booming, but much of it runs on infrastructure it does not control.
Digital sovereignty is no longer an abstract policy phrase. It is about who can switch off your bank’s backend, your hospital’s records, or your startup’s AI models—and on what terms.
Economists once spoke of a “drain of wealth” under colonial rule. Today, a similar logic plays out in the digital sphere. Indian engineers build world‑class software, but often on platforms owned abroad. The value created in India flows through foreign servers, chips, and algorithms; the surplus ends up on balance sheets in California or Shenzhen. As one recent editorial put it, the question is not whether India earns money, but what kind of money it earns—and what kind slips past it entirely. Digital sovereignty is a nation’s ability to control its digital infrastructure, data, technologies, and critical services without undue dependence on foreign entities.
It goes beyond data localisation. It includes infrastructure such as data centres, cloud, undersea cables, and chips; software and standards like operating systems, foundational AI models, and protocols; data and algorithms that decide credit, health, or policing outcomes; and people, in the form of skills, research capacity, and the ability to innovate domestically. Without control at these layers, “digital India” risks becoming a market for others’ technology rather than an owner of its own.
India faces what some commentators call a digital trilemma: ascendancy, capitulation, or genuine sovereignty. Ascendancy would mean building home‑grown giants that compete globally—like China did with Alibaba and Tencent. Capitulation means accepting permanent dependence on foreign platforms and standards.
Sovereignty is the middle path: staying open to the world, but on terms that protect strategic autonomy and allow Indian firms to capture more of the value created here. The challenge is that each path has costs. Complete self‑reliance is unrealistic; total openness leaves India vulnerable to sanctions, export controls, and corporate decisions made thousands of miles away. India has made real progress. UPI rewrote the rules of payments. ONDC is challenging platform monopolies in e‑commerce. The IndiaAI mission aims to build domestic AI capacity. Yet vulnerabilities remain. Most cloud workloads run on foreign hyperscalers. Frontier AI models are imported, not built. Critical sectors—finance, health, defence—depend on software and hardware whose source code and supply chains are outside Indian control. A recent cloud suspension episode showed that localisation alone is not enough. If the cloud itself is foreign‑controlled, data “in India” can still be switched off from abroad.
Experts and editorials suggest a few concrete steps. First, targeted data localisation: keep sensitive categories—health records, payments, defence, core government systems—on Indian soil, enforced by a well‑staffed, independent data protection regulator. Second, build Indian cloud and compute: expand domestic data centres and cloud providers so that “hosted in India” increasingly means owned and operated by Indian firms, not just located here. Third, invest in sovereign AI and language models: fund Indian foundation models for agriculture, health, education, and governance, especially in Indian languages. A country that does not build its own AI will end up renting someone else’s indefinitely.
Fourth, deepen tech financing and use public procurement: link universities, labs, and startups through sustained deep‑tech funding, and use government purchasing power to favour secure, auditable, and preferably Indian‑owned solutions for critical workloads. Fifth, focus on ownership, not just presence: make it easier for Indian‑founded companies to stay Indian‑owned or return home—through tax certainty, faster listings, and clearer merger rules.
The goal is to own a real piece of the digital economy, not just host it. None of this means shutting India off from the world. The test is simple: does a policy build Indian capability and bargaining power, or does it just build a wall? Only the first kind is worth pursuing. By 2035, the countries that exercise genuine digital sovereignty will be those that understood, in time, that sovereignty lives in the infrastructure—and not just in the apps built on top of it. For India, the choice is clear: remain a vast market and data reservoir, or become an owner of the digital future it is helping to create.