Summary
- nLighten and Arqit have completed a proof of concept linking a sovereign European data centre foundation with public cloud workloads.
- The model uses nLighten’s Geneva facility, Arqit’s SKA-Platform, and Intel Trust Domain Extensions for confidential computing.
- The companies plan to replicate the approach across nLighten’s network of more than 30 edge data centres in seven European countries.
nLighten and Arqit have completed a proof of concept designed to let organisations use public cloud services while keeping sensitive data and cryptographic controls anchored in a European data centre.
The test was conducted between nLighten’s Geneva data centre and a major hyperscaler. The model keeps customer data and encryption controls rooted in the Geneva facility while Arqit’s Symmetric Key Agreement Platform extends the trusted environment into the cloud.
The proof of concept also uses Intel Trust Domain Extensions, a confidential computing technology designed to isolate virtual machines or containers from outside software, unauthorised users, and neighbouring workloads. The companies plan to replicate the model across nLighten’s network of more than 30 edge data centres in seven European countries.
Sovereignty moves back to the facility
Sovereign cloud debates often focus on jurisdiction, contracts, provider controls, and data residency. The nLighten-Arqit model brings part of the question back to physical infrastructure. Instead of relying only on contractual assurances or cloud-provider-specific sovereign offerings, it uses a specific European data centre as the anchor point for data and cryptographic control.
That approach speaks to sensitive and regulated workloads that need public cloud scale without handing all trust functions to the cloud layer. Public cloud platforms provide elastic capacity, AI services, analytics, and developer tooling, but organisations handling highly sensitive data still need assurance over where data sits, who controls keys, and which systems can access protected information.
The infrastructure angle is clear. Edge and regional data centres can become more than latency nodes. They can operate as sovereignty control points, cryptographic anchors, compliance boundaries, and hybrid cloud gateways. That gives physical data centre platforms a role in regulated cloud architecture even when some compute workloads continue to run in hyperscale environments.
Arqit’s role centres on quantum-safe encryption and its SKA-Platform. The immediate operational question is not only whether encryption is future-proofed against quantum threats. Customers will also examine key agreement, cryptographic separation, auditability, and control over sensitive assets across hybrid infrastructure.
Edge platforms look for a trust role
nLighten’s planned replication across more than 30 European sites gives the proof of concept a physical expansion path. If the model works beyond Geneva, customers could anchor sensitive controls closer to national or regional requirements while still using public cloud capacity for elastic workloads.
The approach fits a European market where sovereignty is moving from political language into procurement and architecture. Customers are asking where data is stored, who can access it, what law applies, where keys sit, and how workloads behave if a provider, government, or third party changes the operating assumptions.
For data centre operators, that creates opportunity and pressure. Facilities used as trust anchors need strong physical security, resilient power, network diversity, audited operations, operational transparency, and clear compliance controls. A sovereignty offer cannot sit only on a contractual wrapper; it has to be supported by the building, the processes, and the people operating it.
The nLighten-Arqit work remains a proof of concept rather than a broad market deployment. It still requires legal, regulatory, operational, and customer due diligence before it can support production environments at scale. Its value is in showing how the physical infrastructure layer can re-enter a cloud sovereignty debate often dominated by software controls and provider terms.
If replicated successfully, the model could strengthen the role of European edge facilities in hybrid and sovereign cloud architecture. The likely result is not a rejection of public cloud, but a more layered operating model in which data centres, confidential computing, cryptographic platforms, and hyperscale resources each carry part of the trust boundary.
