Singapore firms do not need another abstract debate about sovereignty. They need a clearer answer to a more immediate question: As the region becomes more connected, how much control do they still have over the systems, data, and workflows they depend on?
That question matters because Singapore’s economy is built on openness. Its firms rely on cross-border data flows, regional platforms, and digital services that move across jurisdictions. This connectivity supports scale, speed, and reach. But it also means more of the operating environment sits outside a company’s direct control.
Firms are feeling the pressure to respond. According to Kyndryl’s 2025 Readiness Report, 83% of business leaders said data sovereignty and repatriation were more important than a year ago and 65% already changed cloud strategies in response to geopolitical pressure. Only 24% of organizations in Singapore said they were fully prepared to manage future risks.
These findings point to the heart of the problem. Many leaders have heard the sovereignty argument. But fewer have operationalized sovereignty to inform what happens when access to data or systems changes, providers shift direction or create new dependencies and vulnerabilities, geopolitical tensions affect service availability.
For businesses, sovereignty is the fundamental risk model that shapes strategic optionality, operational agility and sustainable transformation. In practice, it comes down to who controls the service, how it is governed, whether it can be maintained under geopolitical stress, and how dependency risks are managed across technology, data, and operations.
Risk increases when firms cannot see how their data, applications, and AI workloads depend on systems across jurisdictions. Organizations must map where data sits, how it moves, who controls it, and how technology and operations are connected. Without this visibility, they lose the ability to respond quickly to regulatory change or disruption.
In Singapore, firms do not want isolation. They want access. They want speed. They want regional reach. They want to stay connected while maintaining resilience and competitiveness.
That is why the real issue is not just control in theory but control in practice. Which workloads can run safely on global platforms? Which ones need local oversight? Which dependencies can be switched quickly? Which ones would slow the business if access changed overnight?
AI makes these questions more urgent. As agentic AI becomes embedded in daily work, it increases the number of data flows, governance decisions and operational dependencies firms need to manage. Organizations need strong guardrails in place to turn AI agents from a liability into a value driver.
Already, many firms use AI in functions that no longer sit at the edge of the business. Logistics, marketing, software development, and internal research all depend on systems that need continuous access to trusted data. If access changes, disruption does not stay theoretical. It affects output, timing, and confidence in the process.
The answer is not to bring everything back in-house. Some systems can run safely on global platforms. Others may need stronger local control, tested fallback options, or clearer ownership of keys, logs, and recovery paths. The right model will differ by sector, company, workload, and overall risk level. But firms should know which choices preserve their ability to keep operating.
Sovereignty cannot sit only with IT, legal, or compliance teams. It belongs in boardroom discussions on business continuity, risk, and resilience. Boards do not need to manage every technical detail. They do need to know which critical functions depend on external AI, cloud, or software platforms; who controls those dependencies; and how quickly the business can switch, isolate, or restore important workflows if access changes.
If leaders cannot answer those questions quickly, they are making sovereignty decisions without a clear map of the business. That is where an independent sovereignty assessment becomes useful. It gives leaders an outside-in view of where critical workflows depend on external systems, where control could break, and which response options exist before disruption occurs. Our own assessment is built around that logic: it reviews data and operational and technical domains, then turns sovereignty gaps into practical options and a phased roadmap.
For Singapore firms, the imperative is to stay connected without losing control of the systems they depend on. The firms that get this right will not be the ones that step back from openness. They will be the ones that embrace openness while strengthening their ability to see, control, and keep systems agile. In a market built on regional reach, this position will protect competitiveness even when conditions change.
Guat Ling Ang is Managing Director of Kyndryl Singapore.
Editor’s note: This contributed article has been lightly edited for clarity, length, and style. The views and arguments expressed remain those of the author.
Share your perspective: TNGlobal welcomes contributed insights and expert commentary from across Asia’s technology and innovation ecosystem. Submit a contribution for editorial consideration, or explore more conversations in our TNGlobal INSIDER and TNGlobal Q&A and Interviews archive.
Featured image: INSIDE THE B on Unsplash
While Singapore businesses accelerate AI adoption, readiness gaps threaten AI innovation – Kyndryl