Data Sovereignty: Why the Middle East Is Building Its Own Infrastructure

Insights · Infrastructure

Ask a CIO in Riyadh, Abu Dhabi or Doha what determines their cloud architecture, and data residency usually comes before price, before latency, even before feature parity. In much of the world, “which cloud to use” is a procurement question. In the Middle East, it is increasingly a jurisdictional one first.

That ordering explains a wave of regional infrastructure that would otherwise look like duplication. AWS (Bahrain, UAE), Microsoft Azure (UAE, Qatar) and Oracle (UAE, Saudi Arabia) have opened cloud regions in the Gulf since 2019, and Microsoft and AWS have announced Saudi regions for late 2026 — not because global capacity was lacking elsewhere, but because national rules increasingly require certain categories of data, particularly government, financial and health data, to stay within defined borders and under a defined legal regime.

Sovereign by design, not just by location

Regional operators go further. Entities like Core42 and Moro Hub, and national programs run by authorities such as Saudi Arabia’s SDAIA, are built explicitly around sovereign cloud: infrastructure whose ownership, staffing and legal jurisdiction are domestic by design, not merely hosted domestically by a foreign operator. The distinction matters to regulators, because a foreign-owned region physically located in-country still answers, in the last resort, to a foreign parent’s legal obligations.

A genuine construction boom

The physical consequence is a real data center construction boom. Land, energy and public policy have combined to make the Gulf one of the most active regions in the world for hyperscale and colocation buildouts, with power density per rack rising sharply as AI training and inference workloads replace conventional enterprise computing as the primary driver of demand.

Architecture starts with a map, not a stack

For companies operating in the region, architecture decisions now start with a jurisdictional map, not a technology stack. Where the data can legally sit determines which providers are viable, which workloads can run where, and how digital sovereignty conditions the country’s next decade of AI adoption — a discipline the rest of the world is only beginning to take as seriously as the Gulf already does.