What sovereign AI means in practice
It is not one product. It is a set of choices about control, and most organisations need different answers for different data.
- Data residency. Where your documents, prompts and outputs are stored, and where an AI model processes them. These can be different places.
- Jurisdiction. Which country's law applies to the provider. A UK data centre run by a company headquartered elsewhere may also be subject to that country's law. Whether that matters depends on your risk assessment.
- Model control. Whether you use a provider's hosted model, a model you host yourself, or both, and who can change it.
- Operational control. Who can see logs, who can switch the service off, and what happens to your data when a contract ends.
Four questions to answer before you choose a tool
- Which of our data is personal, sensitive or classified, and which is not?
- For each AI tool we are considering, where are prompts processed and stored, and for how long?
- Is any personal data transferred outside the UK, and if so, on what legal basis? See the ICO guidance on international transfers.
- Who in our organisation signs off each use, and how will we explain it to the public if asked?
The options, from most to least control
- On-premise or private cloud, open-weight models. Highest control, highest running cost and the most in-house skill needed.
- UK-region cloud AI services with regional processing. Strong control for most needs, if you choose the regional options and check the terms.
- Microsoft 365 Copilot and similar tools inside an existing tenant. Works within the data boundary and permissions you already have, so permissions must be right first.
- Public AI tools with no contract. No control. Usually only acceptable for public, non-personal information.
Guides by sector
- Sovereign AI for the UK public sector
- AI and patient data in the NHS
- AI in local government
- AI in schools and colleges
- Comparison: on-premise versus cloud AI
How public bodies buy this work
Procurement rules depend on the value of the contract and on the buyer. The Procurement Act 2023 guidance explains the current regime.
- Find a Tender. The UK central platform for public procurement notices under the Procurement Act 2023. find-tender.service.gov.uk.
- Sell2Wales. Where public bodies in Wales advertise contracts. sell2wales.gov.wales.
- Contracts Finder. Lower-value public contracts in England. gov.uk/contracts-finder.
- G-Cloud. The Government Commercial Agency framework for cloud software, hosting and support. G-Cloud 15 runs from August 2026 to February 2028. G-Cloud 15.
- Below threshold. Many public bodies can buy smaller, fixed-price pieces of work, such as a one-day review, under their own procurement rules. Check with your procurement team first.
Certifications buyers ask for
- Cyber Essentials and Cyber Essentials Plus. A National Cyber Security Centre scheme covering basic security controls. Often a condition of public sector contracts that handle personal data.
- ISO/IEC 27001. The international standard for information security management. ISO/IEC 42001 is the newer standard for AI management systems.
- Data Security and Protection Toolkit (DSPT). An annual self-assessment that organisations with access to NHS patient data and systems must complete.
- Digital Technology Assessment Criteria (DTAC). NHS England's baseline for digital health technologies: clinical safety, data protection, technical security, interoperability, usability and accessibility.
- Ask for evidence. Ask every supplier, including us, for certificates in writing, and check them against the issuing body. A certificate covers a named scope and date; check both.
How to start, and what it costs
- Free AI Readiness Audit. 15 questions, about 5 minutes, including AI governance. Take the audit.
- AI and Copilot Discovery Day. One day with a consultant, £950 + VAT, fixed. For a public body this is where we classify your data, map where each AI tool processes it and agree the rules. See what is included.
- Implementation. Value based, scoped and quoted after the Discovery Day.
When we are not the right fit
If you need a supplier to host and operate AI infrastructure for you, a specialist UK hosting provider is better placed, and we can help you write the requirement. If a framework listing or a specific certificate is a condition of your contract, ask us for our current status in writing before you engage anyone. Guidance here is general; for legal advice on data protection or procurement, speak to your legal team.
Questions we are often asked
What is sovereign AI?
Using AI in a way where your organisation controls where its data is stored and processed, which models can access it, who can see it and which law governs it.
Is data stored in the UK the same as sovereign?
Not always. Storage and processing can happen in different places, and a provider headquartered outside the UK may also be subject to its home country's law. Check where prompts are processed, not only where files are stored.
Do we need to run AI on our own servers?
Rarely for everything. Most organisations keep the most sensitive data on tightly controlled services and use UK-region cloud AI for the rest. See our comparison of on-premise and cloud AI.
Can a public body use Microsoft Copilot?
Many do, after checking permissions, data classification and their own policies. Copilot works within the access your staff already have, so oversharing in SharePoint or Teams becomes visible through it.
How much does a sovereign AI review cost?
The AI Readiness Audit is free. The AI and Copilot Discovery Day is £950 + VAT, fixed, and covers data classification and residency for the tools you plan to use. Wider work is quoted after the day.