When the world gets uncertain, people look for the familiar — local food, domestic manufacturing, regional banks. But the data running your business sits on servers you've never seen, in countries you never chose. That didn't happen by accident. That happened by design.
The Return to Local — Everywhere Except Where It Matters Most
Something quiet has been shifting across global business. Supermarkets promote regional supply chains. Governments fund factory reshoring. Consumers choose the local shop over the global logistics empire. The instinct is clear: when the world feels unstable, you want to know where things come from.
Only with data has this instinct never arrived. Your customer records sit in Ireland — from where they can be handed to a US authority without notifying you. Your accounting runs through a cloud provider headquartered in Seattle. Your team's files live on servers in Singapore.
Nobody consciously decided this. It just happened.
The Paradox of Digital Globalisation
The digital infrastructure built over the past two decades followed one principle: scale beats locality. Larger data centres meant cheaper storage. Global providers meant more features for the same price. That was a good deal — as long as the world stayed stable.
The world did not stay stable. Trade disputes, extraterritorial laws, geopolitical realignment — suddenly the infrastructure running your business turns out to have been designed for an era that is ending.
This is not a European problem. A company in Singapore, in Brazil, in Canada, in the Gulf — all face the same issue. It is an infrastructure problem. And it belongs to everyone.
What Is Actually Happening Right Now
In March 2026, twenty-five CEOs of European cloud companies published an open letter with a stark warning: what many providers market as 'sovereign cloud' is, in reality, just a European data centre with US law sitting on top of it. The term has taken hold: Sovereignty-Washing.
The mechanism is called the CLOUD Act. It has existed since 2018. It applies to any company with a US presence, a US subsidiary, or US investors with a controlling stake — covering nearly every provider you recognise by name.
What this means in practice: A data centre in Frankfurt or Dubai does not protect you from US authority requests if the company behind it is subject to US law. Full control of the infrastructure is the only reliable protection.
The Path Home Exists — It Requires a Decision
Returning to locally controlled digital infrastructure is technically possible. It is often cheaper than assumed. But it requires an intentional choice: software runs not on someone else's servers, but on infrastructure you own or fully control.
Modern open-source software is no longer the compromised alternative to commercial products. In many cases it is better — faster to develop, more actively maintained, and — critically — auditable. Open source is the only code someone has actually read.
53%
of software licences unused on average
CLOUD Act
in force since 2018
24h
NIS2 incident reporting window
3
areas to reclaim first
What This Means for Your Organisation
Three areas most organisations prioritise first:
Business operations — Proposals, invoices, customer data, financials. The operational backbone should not sit on a server accessible to a foreign government authority without your knowledge.
Automations and workflows — When your processes run through external services, you depend on their availability and pricing. Workflows on your own infrastructure continue when everything else fails.
Communication and files — Internal messaging, shared documents, team assets. The area most organisations are most relaxed about — and most exposed.
Your Space. Your Data. Your Rules.
Tycho Operations brings your digital infrastructure home — Nextcloud, Matrix, Immich. Controlled, secure, yours.
Your Space. Your Data. Your Rules.
The first step is not a migration. It's a question: do you know where your data currently lives?