Digital sovereignty in wealth management does not stop with the cloud
Friedhelm Schmitt
Digital sovereignty in wealth management is not decided by the location of the data centre, but by the question of who retains control over data, technology and advisory logic. A recent white paper on digital sovereignty in the financial sector gets straight to the heart of this shift. Friedhelm A. Schmitt, CEO and Co-Founder of fincite, explains what this means for banks and wealth managers.
What does digital sovereignty mean?
Digital sovereignty is not autarky, but the ability to self-determine and manage digital value and supply chains despite existing dependencies. The study (KPMG, 2026) explicitly describes it as a leadership and architectural principle, not a market-ready product. Accordingly, a "sovereign" label on a cloud does not yet create sovereignty.
The research distinguishes between four dimensions: infrastructure and operational sovereignty, technological sovereignty, data sovereignty and governance sovereignty. Cybersecurity acts as a cross-cutting function across all four. If control is lost in one dimension, systemic dependencies arise which, under regulatory or geopolitical pressure, can become an existential threat.
The core message of the study is simple: you cannot buy sovereignty, you must have the capability.
Why is the cloud location not enough?
The location of a data centre is not proof of legal sovereignty. Extraterritorial laws such as the US CLOUD Act and FISA §702 enable governmental access even to data that physically resides within the EU, particularly in the case of a US nexus or US routing. Data residency answers where the data is stored. It does not answer who can be forced to hand it over.
The study contrasts two paths that look almost identical on paper:
"Compliance First": EU-hosted, with provider-managed keys and a reassuring server in the EU.
"Competence First": The institution holds its own cryptographic keys with which data is encrypted and decrypted, for example via Confidential Computing and Hold Your Own Key, and remains truly capable of acting.
The crucial difference lies right here: whoever holds the keys controls the access. If they are held by the provider, even the EU location is of little use. Therefore, only the second path is sovereign. An institution can be fully EU-hosted and contractually sound and still have no real control over its data.
Where does the actual dependency in wealth management lie?
At this point, Friedhelm A. Schmitt goes a step further than the study. It defines governance sovereignty as the fourth dimension, i.e. the question of who decides which data flows into a decision and who verifies whether a recommendation remains comprehensible. Applied to wealth management, this is no longer a purely IT matter, but a question of advisory responsibility towards the client.
From his perspective, the real black box is not the server location, but the logic with which client data is turned into an investment recommendation. If this advisory logic is distributed across fragmented, proprietary systems that only one provider can change, the sovereignty question is not answered, but merely postponed.
From advisory logic to regulation
For system selection, a clear requirement follows from this: a modular, interchangeable architecture instead of a monolithic platform. Control over interfaces, open standards and the avoidance of black-box solutions are recommended, so that individual components can be replaced without interrupting operations.
DORA tightens this point. According to Article 28, the regulation requires not only contractual exit clauses, but tested exit strategies for critical ICT services. An institution whose advisory logic is not portable cannot provide this proof in an emergency. From Friedhelm A. Schmitt's perspective, this requirement is gradually moving closer to the advisory level itself, not just the underlying infrastructure.
fincite develops fincite • cios, a modular wealth management software that is API-first and compatible with existing core banking systems. This allows components such as onboarding, portfolio construction or reporting to be changed independently of one another if a provider no longer fits or a regulatory requirement demands it.
FAQ
What does digital sovereignty mean in wealth management?
Digital sovereignty in wealth management is the ability of a bank to retain control over data, technology and advisory logic. It is a leadership and architectural principle, not a product, and is not decided by the location of the data centre.
Why is an EU data centre not enough for digital sovereignty?
An EU location does not protect against extraterritorial access. Under the US CLOUD Act and FISA §702, US providers can be forced to hand over data, even if it is stored in the EU. Key sovereignty and technical control are crucial, not data residency alone.
What does DORA require with regard to exit strategies?
According to Article 28, DORA requires tested exit strategies for critical ICT services, not just contractual exit clauses. Institutions must be able to prove that they remain capable of acting in the event of a failure or a change of provider.
Conclusion: Sovereignty is a question of advisory logic
Digital sovereignty in wealth management is not decided by the server location, but by control over the advisory logic. The study (KPMG, 2026) shows that sovereignty is a leadership and architectural principle and that data residency alone does not protect against the CLOUD Act and FISA. DORA already makes tested exit capability mandatory today. Institutions that have not set up their advisory logic in a modular and portable way will find it difficult to provide this proof in an emergency.
