SkyeConnex Blog.
Long-form analysis on data sovereignty, post-quantum cryptography, multi-cloud architecture, and the regulatory landscape that is making all three board-level concerns.
October
2026 3 postsCSIS Just Said It Out Loud. Data Centres Are Targets.
CSIS has named data centres as targets for espionage, sabotage and insiders. Canada’s answer is more of them, each holding everything in one place, with the keys held by the operator in the same building.
Kingston Police Got Hacked. Good News, the Hacker Pinky Swore.
160 GB and about 100,000 documents left on one stolen VPN credential — court dockets back to 2009, records reaching to 1998. The risk is called low, partly because of the passage of time. The proof of deletion came from the party who took the files.
Ottawa Just Said Assume Breach. Out Loud. In Writing.
Treasury Board’s new SPIN tells departments to operate under an “assume breach” paradigm, with critical services listed by November 30. That changes the question from how do we keep them out to they are already in, what do they get.
September
2026 8 postsBARC Measured the Governance Gap. It’s Where We Said It Was.
62% of governance controls sit at the data layer. Agent tooling is at 10%, and lineage on agents in production is at 9%. We have built very good rules about data, then handed the data to systems that do not read them.
Commentary · 4 min readGood News: Your Data Is Sovereign. Bad News: So Is the Coal Plant.
Seven residency zones. In four of them there is no carbon choice at all. For most of the world, the lawyer picked the grid and the sustainability team inherited it.
Governance in the Data Layer Is a Good Idea. It Is Still a Promise.
Hammerspace makes a real argument for pushing sovereignty rules into the data layer. But a namespace that can enforce a placement rule can also be compelled to read everything it can see.
Marvel's Doom Had One Job. So Did the Perimeter.
Avengers: Doomsday has reportedly leaked in 4K, three months before release. Dozens of VFX, colour and localization vendors each hold a complete usable copy of something. You cannot leak what you do not hold.
Amazon Lost a Country. Your Data Should Survive One.
AWS has confirmed it cannot restore data held only in Bahrain. A cloud region was the target of a military strike, not collateral. Multi-AZ redundancy worked exactly as designed and it did not matter — which means survivability is a third question, separate from residency and sovereignty.
Michael Dell told you the risk is losing control. Then he sold you a very nice cabinet.
Michael Dell named the stakes this quarter: the risk is losing control of your data. He is correct. And he just sold $60.9 billion of AI servers in ninety days to companies who believe a purchase…
SkyeGXU Now Works With NVIDIA PAIR. Pairs Well With Sovereignty.
Here is how most enterprise AI works in 2026. You take your most sensitive question. The merger you haven't announced. The health record. The defence spec. You wrap it in an API call and ship it to a…
Nvidia Just Shipped Half of Our Patent Pending Architecture. Thanks for the Market Education.
On September 3rd Nvidia released PAIR, the Personal AI Router. Free, open source, announced at IFA. It discovers the computers on your home network over mDNS, pairs them with a 6-digit code, and…
August
2026 19 postsFiles Were a Great Idea in 1973
A follow-on to the shadow data piece. What happens when you stop storing the object everyone is attacking. Bias declaration up front: I run SkyeConnex. We build data custody infrastructure.…
Sovereignty Is Now a Feature. Welcome. We Kept Your Seat Warm.
Bias Declaration: I founded SkyeConnex. We defined Data Sovereignty as a Service and took it to market while sovereignty was still a panel topic. Weigh everything below accordingly. BetaKit ran an…
Microsoft Tracked a Hacker Through His VPN. Read the Complaint Twice.
In April, a 19-year-old alleged member of Scattered Spider was arrested at Helsinki airport. The unsealed US criminal complaint runs 39 pages. Buried in it is the first public description of…
Cisco Just Sold Canada a Sovereign Ethernet Cable. The Unplugged Kind.
On Monday, Cisco launched its Sovereign Critical Infrastructure portfolio in Canada. Government, banks, healthcare. Air-gapped. On-prem. Control. Choice. Trust. All the words were there. Let me…
The Build-Buy Debate Skips the Only Question That Matters
Bias declaration: I founded SkyeConnex, a data sovereignty company. I have commercial skin in this argument. Every word below is self-interested. It also happens to be correct, which is a nice bonus.…
Governance Is What You Trade Away on a Friday Night
The Canadian Shield Institute published a good piece this weekend. Read it. They ask where the digital economy fits in the trade war, and they land on this: governance is the foundation of digital…
Elbows Up, Shields Up: Protecting Your Data in a Hyperscaler
Most companies believe their cloud data is protected because a contract says so. That's adorable. If your data lives in AWS, Azure, or Google Cloud, it's reachable under the U.S. CLOUD Act no matter…
"Digital Trade Alignment" Is Four Syllables for Giving Up
On Tuesday night the U.S. Trade Representative congratulated his own president on a deal with Canada. The post listed what the deal contains. Market access for American goods. Economic security…
Sovereign by Press Release
The Global Risk Institute just published a 49-page paper by Chris Collins of the Cascade Institute on AI infrastructure risk for Canadian financial institutions. I recommend reading it. I mean that…
The Premier Doug Ford Said the Quiet Part. Then He Prescribed the Wrong Medicine.
Doug Ford stood in front of the Association of Municipalities of Ontario convention in Ottawa this week and said something remarkable for a sitting Premier. "That would be the worst thing we could…
The Premier Answered a Question Nobody Asked
While writing about Doug Ford's new Data Centre Playbook, I remembered something from the spring. April 30. Jim Balsillie is in front of the House industry committee. He is asked about Cohere…
Your Backup Has a Lawyer Now!
Bias Declaration: I founded a data custody company. A story like this one is worth more to me than a booth at a trade show. Nine PBS in St. Louis is suing to get back 70 years of its own archive.…
Data Sovereignty Is Five Questions. Your Vendor Brought a Map.
Ask a cloud provider what data sovereignty means and you will get an answer about geography. The data is here . In this country, in this region, behind this flag. There will be a map. There is always…
Your Database Doesn't Know It Defected
Your tools already speak S4 — S3 above the line, Canadian custody below it. S4 is exactly what it sounds like. S3 plus Sovereign. The name is also literal — SigV4, the AWS signature scheme every S3…
Shadow Data Is a Billion-Dollar Industry. That Should Embarrass Everyone.
Why the fastest-growing category in data security exists to clean up a mess the storage industry keeps making on purpose. There is now an entire product category dedicated to finding your own data.…
That's No Moon. That's a Compliance Framework.
We've spent the last three years arguing about where data lives. The CLOUD Act, Bill C-26, DGSI 100-8, the endless debate over whether a hyperscaler's Canadian region is actually Canadian. Important…
Good News: Your Data Is in Europe. Bad News: So Is the Subpoena.
Everyone has spent the last three years freaking out about the CLOUD Act. US jurisdiction. Data residency. Where a provider is headquartered. Entire procurement frameworks rewritten around one…
Attack of the Clone(d) Data
Same country. Same laws. Same court order. Two very different mornings. Morning one A CIO at an Ontario health network gets an email at 6:42 a.m. from her cloud provider's legal notification service.…
Encryption Isn't Enough. Canada Now Says So In Writing.
How SkyeConnex measures against CAN/DGSI 100-8:2026 Standards usually describe outcomes and leave the mechanism to the vendor. That's how sovereignty theatre survives an audit. You promise the…
July
2026 4 postsOttawa asked the right question about AI transparency. The answer is not a label.
ISED opened a public consultation on AI transparency on July 23. It closes September 23, which gives anyone who cares about this two months to write something down. The discussion paper covers five…
The Trade Press Got the Diagnosis Right. The Prescription Is a Sternly Worded Letter.
BizTech Magazine ran a primer this month on data sovereignty in financial services. BizTech is CDW's house publication, and CDW sells more hyperscaler cloud than nearly anyone alive, so this is…
70 Prominent Canadians Ask the Empire to Please Behave
Seventy prominent Canadians, including Margaret Atwood, John Ralston Saul, Adrienne Clarkson, the CCLA and the CMA, signed an open letter asking Prime Minister Carney to defend Canada's digital…
A Warrant Doesn't Need a Visa
A Warrant Doesn't Need a Visa BBD published a data sovereignty primer this week. It defines residency, sovereignty and localization correctly, which in this industry puts it in roughly the top decile…
June
2026 20 postsThe Watchdog Answers to the President Now
What Trump v. Slaughter changes for transatlantic data transfers — and why the answer was never a better promise. On 29 June 2026, in Trump v. Slaughter , the US Supreme Court held that the for-cause…
$570 Billion Is a Lot of Money to Spend Learning What "Single Point of Failure" Means
The $570 Billion Reminder Microsoft lost roughly $570 billion in market value this month. The stock is down about 17%, its worst stretch since the dot-com era. The market has decided this is an AI…
Congratulations On Your Mature Collaboration Strategy. You've Built A Bomb.
A single email did it. Nobody opened an attachment. Nobody clicked a link. Nobody did anything at all. The email simply arrived, and Microsoft 365 Copilot quietly read its instructions and…
Sovereignty Is Not a Control You Add. It's an Architecture You Can't Subtract.
ALSO Group's Mark Appleton said something correct this week, and then spent the rest of the interview walking it back. The correct part: "You cannot claim sovereignty if you don't understand how your…
Three Copies Is the Expensive Way to Be Less Safe
Most resilience strategies are an act of faith with a storage invoice stapled to the back. Let's do the arithmetic instead, since apparently someone has to. The default move is triple replication.…
The Speed of Light Doesn't Sign NDAs
Everyone arguing about data sovereignty is arguing about law. Jurisdiction, the CLOUD Act, who can serve a warrant on whom. Worth arguing about. I've done my share. But there's a second instrument in…
The Quiet Sovereign Problem With Hyperscalers
The sovereignty problem with hyperscalers is not that they are bad at cloud. It is that they are very, very good at cloud. They make applications fast by doing exactly what global platforms are…
Harvest Now. Decrypt Later.
Right now, somewhere with good air conditioning and a generous storage budget, encrypted traffic is being copied wholesale and filed away by people who cannot read a byte of it. Yet. That's the…
The Egress Fee Is Not a Pricing Quirk
You do not own your data. You rent supervised access to it, and the rent spikes the instant you mention leaving. That's what an egress fee is. Not a cost-recovery line — a tollbooth pointed the wrong…
Get Breached. Lose Nothing.
Let's retire the nation-state fantasy. It's load-bearing in too many security decks and it protects no one. The thing that actually ends a mid-sized company isn't a foreign intelligence service…
Multi-Region Is Not a Backup Plan
Every eighteen months or so, a data centre in northern Virginia has a bad morning, and a few million businesses discover they were all renting from the same landlord. Banks, airlines, baby monitors,…
The Watermark Said "Do Not Duplicate." It Duplicated.
Sony's second trailer for Spider-Man: Brand New Day leaked this week, days ahead of its June 17 debut. Every frame carried a big red X and a stern…
Storm-2949 Didn't Break In. They Logged In.
Microsoft's threat intelligence team published a 20-minute read on May 18 about a threat actor called Storm-2949. It's worth your time. Not because the…
Sovereign Compute, Borrowed Data
Canada released its national AI strategy last week. AI for All. Six pillars, nearly $200 billion in projected productivity, up to 250,000 new jobs…
Canada's Sovereignty Posture vs. Reality
Canada spent the week announcing sovereignty. It spent the decade buying the opposite. The gap is sitting in your inbox, unread.
Schrems II two years on: what actually changed for EU-US data transfers
The 2020 CJEU ruling invalidated Privacy Shield. Five years and one EU-US Data Privacy Framework later, the underlying problem remains. Here's what's changed — and what hasn't.
CBC and CTV Say Canada's Cloud Market Is "Broken." They're Half Right.
Bias Declaration: I founded SkyeConnex, a Canadian data-sovereignty company. I compete directly with the providers this piece concerns, and I sell the…
The Kill Switch Has a Loyalty Program - Microsoft is in the Trump trap
Three weeks before Brad Smith promised Europe that Microsoft would protect it from Washington, Microsoft had already locked the Chief Prosecutor of the…
Have You Ever Wondered Where Your Data Goes in the Cloud?
You upload the quarterly numbers. A little spinner turns. "Saved to the cloud." Reassuring phrase, the cloud. Sounds like the sky. Soft. Harmless. Vaguely…
A Better Question Doesn't Survive a Subpoena
Bergson Lopes Rego published a piece in CDO Magazine called "The Data Sovereignty Illusion." Read it. The diagnosis is correct, which makes it rare.
May
2026 15 postsWhat a CLOUD Act subpoena actually looks like in practice
Most board conversations about the CLOUD Act stay abstract. Here's a concrete walkthrough of how the mechanism works — and why architectural sovereignty defeats it.
Europe Built a €180M Sovereign Cloud. It Runs on Google. — June 3 it's law
The EU's Tech Sovereignty Package arrives June 3. Probably. It was due in March, then April, then late May, and has now been rescheduled more times than a…
Your Grocery Bill Now Comes With a Browser History
There was a time when shopping was simple.
SkyeConnex - SkyeBucket (S4)
Every sovereign cloud pitch eventually asks you to do the same thing: rip out your stack and adopt theirs.
89% Say Sovereignty Matters. 10% Paid For It.
BARC's Data Sovereignty 2026 is out. The headline: 89% of organizations rate data sovereignty as important. 51% say "very important." Only 2% don't care.
The CLOUD Act and why data residency isn't enough
The CLOUD Act extends US legal reach to data held by US-controlled cloud providers anywhere in the world. Choosing a Frankfurt or Toronto region does not change that. Here's what does.
Sovereignty Is Not a Postal Code - CTV News
CTV ran a piece this week about Canadian companies building data sovereignty. The reporting is solid and the people quoted are right about the problem…
Germany, Palantir, and the Moment “Very Impressive” Still Means “No”
Palantir just ran into a very German problem.
Canada Needs a Sovereign Dependency Test, Because “Trust Us” Is Not an Architecture
Canada has become very good at buying platforms from other countries and then convincing ourselves we are in control because the invoice has a Canadian…
Reed-Solomon erasure coding for storage: a practical primer
Reed-Solomon codes are decades old. They're suddenly central to sovereign cloud architecture. Here's what they do, the math you need, and the engineering trade-offs.
Reassurance Is a Fine Product. It Shouldn't Cost the Same as Proof
Four Questions Every Data Sovereignty Vendor Should Answer (And Sign)
Why customer-managed keys aren't zero-knowledge
Customer-managed keys (CMK) are hyperscalers' answer to the sovereignty question. They're better than provider-managed keys. They don't deliver zero-knowledge. Here's the difference.
Data Sovereignty 2026: Reality, Relevance, and the Bit Where You Find a Budget
BARC just published their second annual Data Sovereignty survey. 320 enterprises across Europe, North America, and the rest of the world. Two numbers tell…
Europe Has the Cards. It Has Always Had the Cards.
There is a Thierry Breton op-ed about European digital sovereignty roughly every eighteen months. The metaphor changes — wallets, pillars, now cards. The…
Sovereignty is not a configuration option
A new paper in Media, Culture & Society makes a clean argument: Microsoft, AWS, and Google have rebranded themselves as stewards of digital…
April
2026 16 postsSovereign AI: running RAG on regulated data without OpenAI exposure
Retrieval-augmented generation over regulated documents is a board-level win — if you can do it without sending those documents to OpenAI or Azure OpenAI. Here's how the architecture should work.
Telegram Drive: The Market Just Winked at SkyeConnex
Every once in a while, something appears on GitHub that makes you laugh and then quietly say:
The Next Cloud Pivot: Decoupling Storage From Elasticity and Collaboration
For fifteen years, cloud strategy has been sold as a package deal.
Canada Brought a Lumberjack to an API Fight
On Ottawa's sovereignty-shaped blind spot, and why the architecture has to do the job the treaty won't.
Canada Life breach was not the surprise. The architecture was.
There is something almost touching about how predictably these breach stories arrive now.
FIPS 203 and FIPS 204 explained: what NIST's PQ standards mean for procurement
NIST finalized both post-quantum standards in August 2024. ML-KEM-1024 (FIPS 203) and ML-DSA-87 (FIPS 204). Here's what procurement teams should now demand from cloud vendors.
Your healthcare data breach is not over when the letter arrives. That is when the damage gets personal.
I do not need a white paper to explain what happens when sensitive information ends up in the wrong hands.
Digital sovereignty, now available from the same people you were trying to be sovereign from. Act now and we’ll throw in a free maple leaf meme coin.
Microsoft’s Digital Sovereignty Summit was a nice reminder that the market is finally catching up to what should have been obvious a while ago:
“Stored in Canada” is not a guarantee of sovereignty. It’s a Jedi mind trick.
Canada is finally starting to have the right conversation about data sovereignty.
Post-quantum cryptography: SkyeConnex already ships both halves
ML-KEM-1024 (FIPS 203) addresses the key-encapsulation half of post-quantum migration. ML-DSA-87 (FIPS 204) addresses the signature half. SkyeConnex ships both today, in production.
Free cloud drives. Free email. One subpoena. Fun math.
Most people still think the biggest problem with free cloud storage is advertising. As if the real threat is Google scanning your spreadsheet and deciding…
Bill C-26 explained: what Canadian critical infrastructure needs to know
Canada's Bill C-26 — the Critical Cyber Systems Protection Act — quietly reshapes obligations for designated operators. Here's what changes for cloud storage.
Canada keeps talking about sovereignty like it’s a set of hockey cards
Canada has developed a very modern habit. We take an important word, stretch it until it covers everything, and then act surprised when it stops meaning…
Sovereign cloud: same dependency, different accent, premium price
There is a pattern in the data sovereignty market that deserves a name.
Canada’s digital sovereignty push is making the U.S. uncomfortable. Funny how that happens when leverage starts slipping.
The Globe and Mail piece gets at something important: the moment Canada starts treating digital sovereignty like an actual policy objective instead of a…
How to evaluate a sovereign cloud vendor: a 12-point checklist
Most sovereign cloud claims don't survive technical scrutiny. Here's the checklist procurement teams should use — and what good answers look like.
March
2026 21 postsSkyeConnex: Data Sovereignty as a Service for Europe
When no single provider holds the whole file, no single provider holds the power. For Europe’s sovereignty test — from AI architecture to cloud reality…
When Microsoft can switch you off, this is no longer a software story. It is a sovereignty story.
Reuters reported that Nayara Energy, an Indian refiner sanctioned by the EU, has taken Microsoft to court after what it says was the abrupt suspension of…
Europe Is Not Building Another Office Suite. It Is Building an Exit Strategy. SkyeConnex Just Happens to Offer One.
Europe's new EuroOffice initiative is being described as a software story.
The Cloud Does Not Need a Divorce. It Needs Boundaries.
There's a peculiar habit in cloud strategy discussions where every decision collapses into one of two options.
Ransomware in 2026: why your backup target is the new attack surface
The 2020s ransomware playbook shifted when crews started encrypting backup targets. Your recovery story dies the moment your backup destination is compromised. Here's the architectural fix.
Can Canada ever have true digital sovereignty?
By now, Canada has had enough discussions about digital sovereignty to build a very impressive stack of panels, roundtables, and policy decks. Actual…
Europe Isn’t Banning Microsoft. It’s Finally Asking the Right Question.
A German state is moving off Microsoft Teams, Office, and eventually Windows.
Useful Until It Isn’t
Everyone wants utility.
The Government of Canada just published an AI Readiness Scorecard. Most departments should read it twice — and be honest the second time.
The Canada School of Public Service recently released a job aid to help public servants assess whether a problem is a strong candidate for an AI-based…
Data governance isn't failing because it's too slow. It's failing because we keep building the roof before the foundation.
Every few years, the data industry discovers the same problem wearing a new outfit.
Quantum 'harvest now, decrypt later': the timeline that actually matters
'We'll worry about quantum when it happens' is the wrong frame. Adversaries are harvesting encrypted traffic today, betting on decryption tomorrow. Here's the timeline that matters.
"Our data never leaves the country" is a great start and a terrible finish.
Every enterprise tech vendor has a sovereignty story now. It usually involves a slide with a map of Canada, some flags, and the phrase "your data never…
Sovereignty Is the Wrong Word. Here Is the Right One.
John Miedema wrote something worth reading this week.
Indigenous Communities Got Data Sovereignty Right. The Cloud Industry Got a Logo.
They did not have a booth. They did not have a lanyard. They were not handing out branded socks or explaining their platform's compliance posture over a…
Data Sovereignty as a Service Doesn't Exist. Except It Does.
Wikipedia has a definition for data sovereignty.
PIPEDA and cloud storage: what most providers get wrong
PIPEDA predates the cloud. Applying it to multi-cloud workloads requires architectural thinking that most providers don't do. Here's the gap, and how to close it.
A Flag on the Rack Does Not Change Who Holds the Power
My perspective comes from both sides: I founded AssetMetrix, an early SaaS company that became part of the foundation of Microsoft’s management stack, and…
Why multi-cloud RAID beats multi-cloud sync
Most multi-cloud storage products replicate your file inside each provider. SkyeConnex erasure-codes it across them. That distinction is the difference between provider lock-in and provider independence.
Canada Is Still Asking the Wrong AI Question
Geoffrey Hinton’s appearance before the Senate’s Standing Committee on Social Affairs, Science and Technology should have been a prompt for a bigger…
What Should a CDO Office Be Doing? Use Data Sovereignty as the Lens.
Data sovereignty is the perfect way to explain what a CDO office is for —because it exposes the real issue.
“Keep It in Canada” Won’t Save You
I read Osler’s piece and had a bit of a grim chuckle—because it’s basically the same conversation I’ve heard (and lived) in the CDO world: everyone wants…
February
2026 3 postsHealthcare data residency: PIPEDA + HIPAA + provincial — a survival guide
Healthcare data in 2026 must satisfy PIPEDA, HIPAA, provincial health acts, and emerging AI compliance — often simultaneously. The architectural answer compounds across all four.
Why 'Canadian-flag cloud' is not Canadian sovereignty
A US-headquartered hyperscaler with a Canadian holding company is still subject to US legal process. Sovereignty by corporate paperwork is flag-washing — and buyers know it.
Migrating from hyperscaler to sovereign storage: the runbook
Most 'we should be sovereign' conversations stall at 'where do we start?' Here's the practical runbook from audit to pilot to expansion to decommission.
January
2026 1 postWant the whitepaper next?
The v1.2 SkyeConnex whitepaper is the consolidated technical and commercial reference. 36 pages. NDA-distributed.