What ‘sovereign AI’ actually means for Hong Kong data — the PDPO, cross-border transfer, Hong Kong cloud regions, and where models and deployment matter.

dgm is an independent osFoundry integration partner — not affiliated with osFoundry’s maker (OS LLC), and dgm has no completed client integrations yet.

‘Sovereign AI’ is a popular phrase, but it means something specific. For a Hong Kong business, sovereignty is mostly about where your data is processed and who can access it — not whether the model is local.

What sovereignty actually means

It comes down to data residency and access: is your data processed in Hong Kong, and is it shielded from unwanted access? The real control comes from deployment — running in a Hong Kong cloud region or self-hosting — not from picking a particular model.

The Hong Kong context

Hong Kong has hyperscaler regions (AWS ap-east-1, Azure East Asia, Google Cloud asia-east2) and a deep data-centre and connectivity base. Importantly, there is no general private-sector data-localisation mandate, and the PDPO’s section 33 cross-border transfer restriction has never been brought into force — so transferring personal data abroad is not statutorily restricted, though the PCPD recommends safeguards.

The jurisdiction nuance

Residency is not the whole story. The US CLOUD Act and FISA 702 attach to the operator’s legal jurisdiction, not the server’s location. osFoundry’s managed cloud pins data to the US, EU or Japan — it does not currently offer a Hong Kong managed region (its nearest managed region is Japan). To keep data in Hong Kong, the honest path is self-hosting osFoundry (BYO Cloud) inside a Hong Kong cloud region such as AWS Asia Pacific (Hong Kong) ap-east-1, Microsoft Azure East Asia (Hong Kong SAR) or Google Cloud asia-east2 (Hong Kong), or running models locally on-device. For the strongest posture, pair Hong Kong residency with local-first processing and customer-held keys.

Where dgm fits

dgm is an independent integration partner that helps Hong Kong businesses adopt osFoundry — scoping a first use case, handling the build, and connecting AI to the systems you already run. dgm is independent of osFoundry’s maker (OS LLC) and has no completed client integrations yet, so everything described here is a service offered, not a past result. If you want to scope a practical first project, dgm can help you map it out.