WEBVTT
00:00:00.320 --> 00:00:01.600
Chapter 7.
00:00:01.760 --> 00:00:15.279
The Architecture of Sovereign EAI Implementations As described in earlier chapters, 90% of the world's data is locked behind firewalls, residing in private, proprietary, or sensitive environments.
00:00:15.519 --> 00:00:24.079
Only 10% is publicly accessible, and it is this minority that has largely powered the first wave of generative AI, Gen AI.
00:00:24.559 --> 00:00:43.840
To unlock the full potential of Gen AI, agentic AI, and ultimately artificial general intelligence, AGI, public and private sector enterprises must develop secure, sovereign mechanisms to access and utilize the 90% without compromising privacy, security, or national control.
00:00:44.240 --> 00:00:52.719
In this chapter, we'll show you how you can do this using a hybrid approach that integrates sovereign data and EAI on an EIM platform.
00:00:52.960 --> 00:01:01.039
New risks, such as foreign administrations being empowered to push the kill switch, have raised concerns at global organizations.
00:01:01.600 --> 00:01:06.239
In today's digital economy, data is the most foundational asset.
00:01:06.400 --> 00:01:11.840
It fuels innovation, drives productivity, and underpins national security.
00:01:12.159 --> 00:01:26.319
As AI transforms every sector and geopolitical considerations rapidly evolve, it's more critical than ever for leaders to safeguard the privacy and protection of their data, infrastructure, and AI capabilities.
00:01:26.640 --> 00:01:35.200
This challenge extends from the enterprise to the national level, where it is imperative that countries develop sovereign plans for AI leadership.
00:01:35.439 --> 00:01:44.239
A country's ability to lead in the AI era depends on its ability to control and harness its most valuable digital resource, data.
00:01:44.640 --> 00:01:53.200
Without full control, countries risk having their digital infrastructure annexed, either technically or legally, by foreign jurisdictions.
00:01:53.439 --> 00:01:57.920
This is not just a matter of innovation, it is a matter of national security.
00:01:58.239 --> 00:02:04.959
IT leaders increasingly regard sovereignty over both infrastructure and data as a strategic imperative.
00:02:05.519 --> 00:02:17.759
In a world of geopolitical tension, trade restrictions, and rapidly evolving regulatory frameworks, dependency on distant or politically constrained providers has become a material business risk.
00:02:17.919 --> 00:02:33.039
Forward-looking organizations aren't just meeting compliance obligations, they're adopting resilient, jurisdiction-aware architectures that can withstand disruption, maintain legal certainty, and preserve operational continuity under any circumstance.
00:02:33.759 --> 00:02:42.879
Digital Sovereignty Definitions Increasingly, discussions globally on data and AI have focused on the importance of digital sovereignty.
00:02:43.120 --> 00:02:56.800
This refers to the ability of a nation or organization to maintain control over its digital assets, data, systems, and operations, ensuring independence from external influence and compliance with domestic regulations.
00:02:57.360 --> 00:03:04.319
Depending on the sensitivity of the data, achieving digital sovereignty may require one or more of the following elements.
00:03:04.800 --> 00:03:06.319
Data sovereignty.
00:03:06.560 --> 00:03:18.080
Ensuring that data is stored, processed, and managed within a specific jurisdiction, with strict controls to prevent access or transfer to foreign entities or under foreign laws.
00:03:18.400 --> 00:03:20.080
Operational sovereignty.
00:03:20.319 --> 00:03:30.319
Ensuring that operations are situated in a specific jurisdiction and that personnel managing digital assets are citizens of that jurisdiction with appropriate security clearances.
00:03:30.639 --> 00:03:42.560
Technological sovereignty, maintaining control over infrastructure, including physical data center security, access rights, and management of hardware, software, and encryption keys.
00:03:42.879 --> 00:03:59.919
This includes sovereignty of the control plane, a set of services critical for integrating applications with underlying infrastructure, legal sovereignty, ensuring that technology vendors and cloud service providers are governed exclusively by a specific jurisdiction's law.
00:04:00.159 --> 00:04:02.639
A balanced hybrid approach.
00:04:03.199 --> 00:04:12.560
To compete in the AI era, nations must leverage the immense scale, innovation, and flexibility of global public cloud services.
00:04:12.879 --> 00:04:19.120
This necessity, however, creates a fundamental tension with the security imperative to maintain sovereign control.
00:04:19.680 --> 00:04:23.759
A hybrid model is the essential solution to this challenge.
00:04:24.079 --> 00:04:30.639
This approach balances both requirements by acknowledging that not all data requires the same level of protection.
00:04:31.040 --> 00:04:45.680
Sensitive sovereign data is protected on secure platforms and a domestically owned and operated infrastructure layer, while public data sets and citizen-facing services can utilize global hyperscalers to achieve the necessary scale.
00:04:45.920 --> 00:04:57.519
Discover how a global leader in technology and services leveraged a hybrid approach of data and AI with Gen AI to analyze historical cases involving millions of documents and thousands of terabytes.
00:04:57.839 --> 00:05:01.040
Case study A Global Tech Leader.
00:05:02.000 --> 00:05:11.120
A global leader in technology and services shapes universal trends in automation, electrification, digitalization, and connectivity.
00:05:11.360 --> 00:05:18.240
Its strong industrial presence drives innovation to improve processes, including optimizing legal operations.
00:05:18.480 --> 00:05:33.759
As a global enterprise, legal challenges are an inevitable part of operating at scale, but lengthy internal investigations and unwieldy early case assessments were hampering their ability to define next steps in diverting the company from innovating and creating value.
00:05:34.000 --> 00:05:43.279
Inefficient processes led to increased costs and risk, given the absence of technology to support case knowledge and control early in the process.
00:05:43.600 --> 00:05:54.800
The company sought a technology solution to help them make better and faster decisions by quickly processing and analyzing large amounts of internal data and help shape how the legal case proceeded.
00:05:54.959 --> 00:05:57.279
The company adopted a hybrid approach.
00:05:57.439 --> 00:06:03.360
Their legal team used it with Gen AI to crunch vast data sets in the case assessment phase.
00:06:03.600 --> 00:06:11.120
They then used a large language model to ask the relevant questions and get answers within minutes to determine their case strategy.
00:06:11.519 --> 00:06:19.120
The global company was able to transform their legal workflows, enabling faster data-driven decisions and proactive investigations.
00:06:19.360 --> 00:06:24.879
Through AI integration and training, its legal teams were able to deliver superior service.
00:06:25.360 --> 00:06:27.680
Architecture for Sovereignty.
00:06:28.079 --> 00:06:41.439
The architectural framework featured on page 119 provides a high-level view of the critical components for enabling the sovereign data and AI capabilities on an EIM platform for both the public and private sectors.
00:06:41.680 --> 00:06:48.079
This framework ensures that secure services are delivered to customers in an efficient manner, protecting their critical data.
00:06:48.319 --> 00:06:52.720
Key aspects of this architecture include dual data architecture.
00:06:53.040 --> 00:07:04.399
Sensitive data is protected within a sovereign layer, while publicly available data is processed in a hybrid cloud environment, i.e., an environment that integrates public and private cloud.
00:07:05.199 --> 00:07:07.120
Multi-agent AI model.
00:07:07.839 --> 00:07:18.639
Private AI agents operate within the sovereign stack while public AI agents deliver services via hybrid cloud, ensuring secure boundaries and data integrity.
00:07:18.959 --> 00:07:30.800
Extensibility, designed to incorporate additional data sets, data security and governance, adhering to policy and controls around protection and use of data.
00:07:31.120 --> 00:07:36.879
Core principles trust, security, national control, and resilience.
00:07:37.120 --> 00:07:40.480
What follows is a breakdown of the above architecture.
00:07:40.800 --> 00:07:43.360
The infrastructure and network layer.
00:07:44.000 --> 00:07:50.800
Sensitive data is hosted within infrastructure operated by trusted telecommunications and data center providers.
00:07:51.040 --> 00:08:15.680
These environments are engineered to meet the most stringent security and sovereignty requirements, employing zero trust protocols, security frameworks that verify every connection, device, and user continuously rather than assuming any element is safe and air-gapped configurations in which critical systems are physically or logically isolated from public networks to prevent unauthorized access or data leakage.
00:08:15.920 --> 00:08:29.759
Deployments remain within defined national or regional borders, with operations managed exclusively by security-cleared personnel to ensure compliance with all applicable laws, regulations, and defense grade standards.
00:08:29.920 --> 00:08:41.440
For data and workloads that do not require full sovereignty, such as publicly available data sets or citizen and customer-facing digital experiences, the framework incorporates global hyperscalers.
00:08:41.679 --> 00:08:55.200
These platforms provide the skill, flexibility, and advanced tooling needed to support innovation, responsiveness, and cost efficiency, while operating under strict governance boundaries that prevent sovereign data exposure.
00:08:55.360 --> 00:09:06.000
Across both zones, the architecture is unified by a common technology stack integrating capabilities in the areas of data and information management, AI models, and AI applications.
00:09:06.159 --> 00:09:08.159
The operational technology layer.
00:09:08.480 --> 00:09:16.960
The operational technology layer is critical for enabling the deployment of data, AI models, platforms, applications, and AI services.
00:09:17.120 --> 00:09:21.360
It provides the bridge between infrastructure, network, and applications.
00:09:21.600 --> 00:09:26.879
In a multi-cloud and hybrid world, standardization at the operational layer is essential.
00:09:27.120 --> 00:09:34.080
Adopting open protocols and interoperable frameworks allows organizations to maintain portability of workloads.
00:09:34.320 --> 00:09:43.279
The ability to move applications and data seamlessly between on-premises, private, and sovereign clouds without refactoring or security trade-offs.
00:09:43.519 --> 00:09:53.279
This is particularly critical for AI workloads where compute intensity, data gravity, and regulatory constraints demand both flexibility and control.
00:09:53.679 --> 00:09:59.759
Operational technology governance also extends to monitoring, observability, and automation.
00:10:00.320 --> 00:10:09.600
Unified control planes and orchestration tools enforce consistent configurations, patch management, and compliance verification in real time.
00:10:09.919 --> 00:10:22.879
In this sense, the operational layer ensures that every AI deployment, from model training to inference, runs within trusted boundaries, adheres to defined jurisdictions, and scales with confidence.
00:10:23.120 --> 00:10:24.159
The data layer.
00:10:24.320 --> 00:10:30.639
As the foundation for EAI, the data layer must support the needs of both the public and private sectors.
00:10:30.879 --> 00:10:40.480
It enables secure, intelligent, and scalable data management across government and public sectors with the extensibility to support private sector needs.
00:10:40.639 --> 00:10:45.519
The architecture requires support for both explicit and implicit data hierarchies.
00:10:45.679 --> 00:10:53.200
Explicit structures include folder hierarchies, taxonomies, schemas, version control, and audit logs.
00:10:53.440 --> 00:11:03.279
Implicit structures include metadata fields, semantic relationships, ontologies, tags, and usage-based clustering.
00:11:03.519 --> 00:11:14.080
These are woven together using metadata driven orchestration and semantic engines, enabling AI systems to reason across both structured and unstructured data.
00:11:14.399 --> 00:11:16.000
Agentic use cases.
00:11:16.240 --> 00:11:22.240
Agents will drive productivity and efficiency gains while delivering better customer service and business outcomes.
00:11:22.480 --> 00:11:59.360
Some sample agenc use cases include health care, personalized health navigation, benefits eligibility, and virtual triage, housing, application processing, permitting, eligibility screening, and subsidy management, banking, proactive fraud detection, personalized financial guidance, and automated loan processing, transportation, dynamic route optimization, autonomous fleet management, and predictive maintenance, taxation, audit flagging, fraud detection, and support for completing tax filings.
00:11:59.759 --> 00:12:11.919
In the following case study, find out how DNB Finans is using AI and data to streamline the administration of car fleets, detect fraud, and improve satisfaction for their leased car customers.
00:12:12.159 --> 00:12:30.080
Case study DNB Finance DNB Bank Group in Norway is Scandinavia's second largest bank, employing 13,430 people and managing total assets worth 250 billion euros, 273 billion dollars US.
00:12:30.320 --> 00:12:36.159
Its subsidiary, DB Finans, is one of the largest finance companies in the Nordic region.
00:12:36.480 --> 00:12:44.960
In the private sector, the organization has a dominant position in the car financing market with more than 300,000 finance vehicles in its portfolio.
00:12:45.120 --> 00:12:49.759
DNB Penance is always looking for new ways to add value for its customers.
00:12:50.000 --> 00:12:57.440
The most valued services it can offer are those that help businesses control costs by providing greater visibility on their spending.
00:12:57.679 --> 00:13:04.480
To this end, the Auto Lease Division of DB Phenons wanted to deepen the BI it provided its clients.
00:13:04.720 --> 00:13:19.840
For example, the system could provide up-to-date statistics to help customers keep track of all car-related costs, including information about fuel use, COT emissions, leasing costs, damage reports, and fraud alerts.
00:13:20.080 --> 00:13:28.639
At the same time, the company needed to establish customized cost center structures so that clients would be able to monitor activity by business unit.
00:13:28.879 --> 00:13:33.919
It was important to D ⁇ B Phenons that the software would be easy to use without training.
00:13:34.159 --> 00:13:39.919
The goal was to achieve a user experience that was similar to consumer social networks, like Facebook.
00:13:40.159 --> 00:13:47.679
The company rolled out a business intelligence and reporting solution to be used by more than 30,000 leased car customers.
00:13:48.000 --> 00:14:00.320
The solution is highly intuitive, featuring colorful visual representations of data, including dashboards for users and logical controls for fraud detection and easy administration of car fleets.
00:14:00.559 --> 00:14:12.080
Since the deployment, DMB Phenons has seen customer satisfaction levels rise from 4.4 to 5.1 on a scale of 1 to 6 for quality of reporting solution.
00:14:12.320 --> 00:14:16.159
The system has also drawn an additional 31% in user logins.
00:14:16.559 --> 00:14:24.320
Increasing activity on the car financing system, DMB Phenons anticipates a return on investment within a short 2.5 years.
00:14:24.480 --> 00:14:39.840
Its customers now have early visibility into issues like excessive mileage or fuel-related fraud and are able to pinpoint the business units responsible, enhancing their ability to act and increasing their loyalty through valuable business information.
00:14:40.159 --> 00:14:45.679
This solution gives the company a significant competitive differentiator in a crowded marketplace.
00:14:46.000 --> 00:14:47.679
Dual data architecture.
00:14:47.840 --> 00:15:02.240
The diagram featured on page 124 presents a detailed architecture for a secure, dual-zoned data and AI platform, distinguishing between the environments for the non-sovereign or public zone and the sovereign or private zone.
00:15:02.399 --> 00:15:16.000
The purpose of this architecture is to ensure that sensitive enterprise and government data and operations are segregated from public or less sensitive domains while still enabling controlled interactions where necessary in the public domain.
00:15:16.159 --> 00:15:26.799
It addresses the need for secure data in AI while providing flexibility to drive efficiency and cost-effective deployments, enabling improved customer experiences.
00:15:27.039 --> 00:15:28.480
Let's break it down.
00:15:28.799 --> 00:15:31.519
The non-sovereign public zone.
00:15:31.919 --> 00:15:40.480
In a dual sovereign data and AI architecture, the public zone serves as the controlled interface between open knowledge and enterprise intelligence.
00:15:40.639 --> 00:15:50.960
It enables organizations to leverage non-sensitive, publicly available data and AI services without compromising internal sovereignty or compliance obligations.
00:15:51.200 --> 00:16:02.960
By isolating public interactions through secure gateways and sanitization protocols, the public zone allows innovation and external connectivity to thrive within clearly defined governed boundaries.
00:16:03.279 --> 00:16:07.919
This zone is composed of non-sensitive and public AI agents.
00:16:08.240 --> 00:16:15.279
This feature includes interfaces like large language model, LLM, APIs that do not use sensitive data.
00:16:15.519 --> 00:16:24.639
The public agent API layer offers endpoints for accessing data with measures to control usage, secure sessions, and store session data.
00:16:24.960 --> 00:16:27.840
Non-sovereign public data sources.
00:16:28.080 --> 00:16:35.360
Here, the system accesses non-sensitive and public databases, published regulations, and service guides.
00:16:35.519 --> 00:16:41.519
It also uses public knowledge bases to improve the accuracy and relevance of the information it provides.
00:16:41.759 --> 00:16:42.960
Security Controls.
00:16:43.120 --> 00:16:58.000
Security measures include sanitization of personally identifiable information using named entity recognition models to strip sensitive information such as date of birth before any gateway validation.
00:16:58.240 --> 00:17:00.320
The sovereign private zone.
00:17:00.480 --> 00:17:12.079
The sovereign or private zone is the intelligence core of a dual sovereign data and AI architecture, where sensitive, mission-critical operations take place under full organizational control.
00:17:12.400 --> 00:17:22.319
Designed for regulated and high assurance environments, this zone governs the use of private agents, confidential data sources, and secure compute infrastructure.
00:17:22.559 --> 00:17:37.279
Every process, from model training to inference, is executed within a zero trust, air gapped framework, ensuring that national, corporate, or institutional data remains fully sovereign, compliant, and auditable.
00:17:37.599 --> 00:17:40.640
This zone is made up of private agents.
00:17:40.960 --> 00:17:48.400
This capability is reserved for enterprise public sector or private sector users and agents that are accessing sensitive data.
00:17:48.559 --> 00:17:52.480
It features an agentic platform capable of air gapped deployment.
00:17:52.720 --> 00:17:58.000
The private agent API layer here is internal only with zero trust security.
00:17:58.160 --> 00:17:59.680
Sovereign data sources.
00:17:59.920 --> 00:18:08.400
This includes protected databases that contain sensitive information, including HR or finance data, as well as sensitive departmental records.
00:18:08.640 --> 00:18:18.799
The Retrieval Augmented Generation RAG pipeline in this context uses protected knowledge sources, including legal precedents, to produce accurate AI results.
00:18:19.039 --> 00:18:28.400
RAG is essential in enterprise AI because it gives models governed access to relevant knowledge at runtime rather than relying solely on what they were trained on.
00:18:28.640 --> 00:18:41.680
Early implementations, often called naive RAG, simply retrieved chunks of text and inserted them into prompts, which could be imprecise and prone to hallucination when context did not fully align.
00:18:42.000 --> 00:18:47.119
Graph-based RAG RAG represents the next evolution.
00:18:47.279 --> 00:18:56.160
It structures enterprise knowledge as relationships and entities, enabling the model to retrieve not just documents but the right contextual meaning.
00:18:56.400 --> 00:19:08.000
As a result, Graph RAG significantly improves precision, traceability, and trust, reducing the need for oversized prompts and brittle context stuffing.
00:19:08.160 --> 00:19:13.759
Today, enterprises have three primary methods for providing context to AI models.
00:19:14.000 --> 00:19:26.319
Large and well-crafted prompts within expanded context windows, RAG, graph RAG retrieval pipelines, and model tuning, including fine tuning and embedding optimization.
00:19:26.559 --> 00:19:42.880
The future of enterprise AI lies in orchestrating these intelligently, shifting from manual prompt engineering towards governed, structured, and scalable context pipelines that enable AI systems to reason with enterprise knowledge securely and reliably.
00:19:43.200 --> 00:19:49.200
Processing infrastructure provides the accelerated compute capacity for secure workloads.
00:19:49.440 --> 00:19:57.279
This includes an immutable audit trail database for compliance oversight and optional fine-tuning of LLM models.
00:19:57.599 --> 00:20:00.160
Shared components and security measures.
00:20:00.400 --> 00:20:13.440
Between these zones lies an API gateway enforcing strict authentication, authorization, protocols, including identity verification via Access Control Federation and Multifactor Authentification, MFA.
00:20:13.599 --> 00:20:18.160
Data classification mechanisms auto-tag content by sensitivity level.
00:20:18.319 --> 00:20:22.400
Data loss prevention tools block sensitive data leakage across boundaries.
00:20:22.559 --> 00:20:27.440
A query router directs requests to the appropriate zone based on classification level.
00:20:27.599 --> 00:20:36.480
Only declassified for public responses are allowed back into the non-sovereign domain after protected data removal, the infrastructure and network layer.
00:20:36.720 --> 00:20:43.680
Both zones leverage robust infrastructure and network layers, ensuring physical and or logical separation where required.
00:20:43.839 --> 00:20:48.240
Sovereign data is not a new concept, a history of private sector use cases.
00:20:48.480 --> 00:20:55.119
Private sector use cases across regulated and unregulated industries can help to frame and shape this sovereign architecture.
00:20:55.359 --> 00:21:03.119
Protecting private and sensitive data has been a necessity for decades, and strong information management has been critical to enabling it.
00:21:03.359 --> 00:21:14.559
The following feature about Transport Canada demonstrates how effective information management brings secure content to the fingertips of people and integrates critical content with business processes.
00:21:14.880 --> 00:21:27.359
Case study Transport Canada Transport Canada's mission is to serve the public interest through the promotion of a safe, secure, efficient, and environmentally responsible transportation system in Canada.
00:21:27.519 --> 00:21:44.720
This requires effective information management to facilitate timely and informed decision making among an extensive list of portfolio partners that include 15 crown corporations, 17 port authorities, and 21 airport authorities, as well as other shared governance organizations.
00:21:45.039 --> 00:21:59.759
Concerned about the dissemination of information through electronic means, privacy assurances, corporate memory loss due to employee turnover, and the need for real time access to information to satisfy requests and litigation concerns, the government.
00:22:00.240 --> 00:22:07.920
Of Canada, GC, championed an e-government solution based on records, documents, and information management.
00:22:08.240 --> 00:22:21.920
Transport Canada was the first Canadian government department to complete an e-government deployment, with more than 4 million records in a single library and 5,200 users to date at more than 117 sites.
00:22:22.160 --> 00:22:26.160
The largest single library deployment in the Canadian public sector.
00:22:26.480 --> 00:22:44.880
Working as an integrated set of tools that facilitates the full use of electronic documentation, from capture and storage to organization, retrieval, sharing, reuse, protection, and disposal of information, the solution has become a mission-critical application for Transport Canada's managers and staff.
00:22:45.039 --> 00:23:02.400
It has helped the organization ensure the accuracy of its corporate records, unite a geographically dispersed and mobile workforce, meet legal obligations, including e-discovery requirements, improve productivity, and align information management with the Government Online GOL initiative.
00:23:02.640 --> 00:23:14.640
Using this system, Transport Canada has tripled productivity savings up to$4.6 million and expects further growth, staying on target to meet its annual cost avoidance savings estimate.
00:23:14.799 --> 00:23:19.200
As a result, the system paid for itself in just 1.17 years.
00:23:19.359 --> 00:23:30.160
As cloud adoption has increased over the last several years, most enterprises are often in a hybrid model of deployment across on-premises, data centers, and public cloud environments.
00:23:30.400 --> 00:23:37.680
It is only natural as AI adoption increases that these proven deployment models evolve to support a hybrid model for AI.
00:23:37.839 --> 00:23:56.160
Bundes Resinzentrum, BRZ, in Austria opted for a hybrid approach, leveraging a cloud-based information management system to consolidate and govern sensitive data across 12 government customers, 40 government applications, more than 10 ERP systems and mailing systems.
00:23:56.400 --> 00:24:00.400
Case study Bundes Resinzentrum, BRZ.
00:24:00.799 --> 00:24:06.880
The Federal Computing Center, BRZ, is the IT service provider of the Austrian public administration.
00:24:07.039 --> 00:24:22.480
With 1,200 employees and a total annual turnover of 265.3 million euro, the BRZ successfully develops and provides e-government services for ministries, universities, social security providers, and public organizations.
00:24:22.720 --> 00:24:32.640
The BRZ deploys 320 IT processes, equips 1,200 locations throughout Austria with infrastructure, and services about 30,000 workplaces.
00:24:32.880 --> 00:24:40.240
In 2000, the land and commercial registers of the Austrian Ministry of Justice were a typical example of process fragmentation.
00:24:40.480 --> 00:24:51.039
While the land registry data had been managed digitally since the 1980s, the original documents remained in the physical archives of courthouses and were inaccessible within processes.
00:24:51.279 --> 00:24:58.000
Moreover, the Ministry of Justice incurred the huge costs of archive maintenance and the risk of losing original documents.
00:24:58.319 --> 00:25:04.640
BRZ decided to address the issue by implementing an enterprise content management ECM solution.
00:25:04.799 --> 00:25:14.400
As the pilot study for the land registry was implemented, BRZ received more requests from administrations to manage documents electronically and integrate processes.
00:25:14.640 --> 00:25:24.480
In response, BRZ built a scalable ECM infrastructure called the eGov Archive Service, the first ever Austrian private ECM cloud service.
00:25:24.640 --> 00:25:33.759
The solution provided a robust platform for 12 government customers, 40 government applications, more than 10 ERP systems and mailing systems.
00:25:33.920 --> 00:25:55.359
The eGov Archive Service manages 45 terabytes TB of data or 400 million objects, serves approximately 1 million transactions per day, and is accessed by 30,000 users, tax auditors, judges, police, customs officials, HR staff, and accountants, and potentially every Austrian citizen.
00:25:55.599 --> 00:26:11.279
Services include everything from managing, accessing, routing, and searching to legally compliant archiving of all kinds of documents, as well as tight integration with line of business and enterprise resource planning, ERP systems, for a comprehensive cloud solution.
00:26:11.519 --> 00:26:13.759
Foundation for Agentic AI.
00:26:14.160 --> 00:26:19.839
Unlocking the world's private data is the central challenge for the next wave of artificial intelligence.
00:26:20.160 --> 00:26:24.400
This chapter has provided the architectural blueprint to do so securely.
00:26:24.559 --> 00:26:32.400
The solution is a hybrid dual zone model that establishes a secure private zone for sensitive assets and a public zone for other workloads.
00:26:32.559 --> 00:26:47.920
This model creates a secure environment where private AI agents can analyze and act on protected enterprise or government data without risk of leakage, while public AI agents handle non-sovereign tasks, balancing control with scale and competitiveness.
00:26:48.480 --> 00:26:59.759
This architecture is the essential foundation for activating advanced AI, providing the trust and control needed for widespread deployment of agentic AI, the subject of our next chapter.
00:27:00.000 --> 00:27:01.839
The FAST 5 Download.
00:27:02.160 --> 00:27:02.720
1.
00:27:02.960 --> 00:27:04.720
Mandate sovereign data control.
00:27:05.200 --> 00:27:11.359
Prioritize and enforce full control over national and organizational data and digital infrastructure.
00:27:11.599 --> 00:27:20.400
Establish policies and technical measures to prevent external influence, ensure data residency, and maintain compliance with domestic regulations.
00:27:20.720 --> 00:27:21.200
2.
00:27:21.519 --> 00:27:24.799
Implement a dual zone hybrid AI architecture.
00:27:25.039 --> 00:27:37.519
Separate sensitive data and workloads onto secure, domestically operated infrastructure, leverage public cloud platforms only for non-sensitive, scalable applications to balance innovation with security.
00:27:37.839 --> 00:27:38.319
3.
00:27:38.640 --> 00:27:41.759
Deploy multi-agent AI models strategically.
00:27:42.000 --> 00:27:47.839
Activate private AI agents within protected zones to analyze and act on sensitive data.
00:27:48.079 --> 00:27:56.799
Use public AI agents for non-sovereign tasks, enabling organizations to scale AI innovation without compromising protected assets.
00:27:57.039 --> 00:27:57.519
4.
00:27:57.839 --> 00:28:00.720
Enforce rigorous governance and security.
00:28:00.960 --> 00:28:07.759
Apply strict authentication, advanced data classification, and robust data loss prevention tools.
00:28:08.000 --> 00:28:17.279
Ensure all critical activities are logged with immutable audit trails and operate under zero trust protocols for maximum oversight and resilience.
00:28:17.599 --> 00:28:21.839
Five, accelerate adoption of proven hybrid architectures.
00:28:22.079 --> 00:28:27.920
Adopt best practices from regulated sectors that have successfully managed hybrid environments.
00:28:28.160 --> 00:28:38.400
Invest in the secure integration of private and public cloud infrastructure to unlock and leverage the 90% of private data critical for next generation AI.
00:00:00.320 --> 00:00:01.600
Chapter 7.
00:00:01.760 --> 00:00:15.279
The Architecture of Sovereign EAI Implementations As described in earlier chapters, 90% of the world's data is locked behind firewalls, residing in private, proprietary, or sensitive environments.
00:00:15.519 --> 00:00:24.079
Only 10% is publicly accessible, and it is this minority that has largely powered the first wave of generative AI, Gen AI.
00:00:24.559 --> 00:00:43.840
To unlock the full potential of Gen AI, agentic AI, and ultimately artificial general intelligence, AGI, public and private sector enterprises must develop secure, sovereign mechanisms to access and utilize the 90% without compromising privacy, security, or national control.
00:00:44.240 --> 00:00:52.719
In this chapter, we'll show you how you can do this using a hybrid approach that integrates sovereign data and EAI on an EIM platform.
00:00:52.960 --> 00:01:01.039
New risks, such as foreign administrations being empowered to push the kill switch, have raised concerns at global organizations.
00:01:01.600 --> 00:01:06.239
In today's digital economy, data is the most foundational asset.
00:01:06.400 --> 00:01:11.840
It fuels innovation, drives productivity, and underpins national security.
00:01:12.159 --> 00:01:26.319
As AI transforms every sector and geopolitical considerations rapidly evolve, it's more critical than ever for leaders to safeguard the privacy and protection of their data, infrastructure, and AI capabilities.
00:01:26.640 --> 00:01:35.200
This challenge extends from the enterprise to the national level, where it is imperative that countries develop sovereign plans for AI leadership.
00:01:35.439 --> 00:01:44.239
A country's ability to lead in the AI era depends on its ability to control and harness its most valuable digital resource, data.
00:01:44.640 --> 00:01:53.200
Without full control, countries risk having their digital infrastructure annexed, either technically or legally, by foreign jurisdictions.
00:01:53.439 --> 00:01:57.920
This is not just a matter of innovation, it is a matter of national security.
00:01:58.239 --> 00:02:04.959
IT leaders increasingly regard sovereignty over both infrastructure and data as a strategic imperative.
00:02:05.519 --> 00:02:17.759
In a world of geopolitical tension, trade restrictions, and rapidly evolving regulatory frameworks, dependency on distant or politically constrained providers has become a material business risk.
00:02:17.919 --> 00:02:33.039
Forward-looking organizations aren't just meeting compliance obligations, they're adopting resilient, jurisdiction-aware architectures that can withstand disruption, maintain legal certainty, and preserve operational continuity under any circumstance.
00:02:33.759 --> 00:02:42.879
Digital Sovereignty Definitions Increasingly, discussions globally on data and AI have focused on the importance of digital sovereignty.
00:02:43.120 --> 00:02:56.800
This refers to the ability of a nation or organization to maintain control over its digital assets, data, systems, and operations, ensuring independence from external influence and compliance with domestic regulations.
00:02:57.360 --> 00:03:04.319
Depending on the sensitivity of the data, achieving digital sovereignty may require one or more of the following elements.
00:03:04.800 --> 00:03:06.319
Data sovereignty.
00:03:06.560 --> 00:03:18.080
Ensuring that data is stored, processed, and managed within a specific jurisdiction, with strict controls to prevent access or transfer to foreign entities or under foreign laws.
00:03:18.400 --> 00:03:20.080
Operational sovereignty.
00:03:20.319 --> 00:03:30.319
Ensuring that operations are situated in a specific jurisdiction and that personnel managing digital assets are citizens of that jurisdiction with appropriate security clearances.
00:03:30.639 --> 00:03:42.560
Technological sovereignty, maintaining control over infrastructure, including physical data center security, access rights, and management of hardware, software, and encryption keys.
00:03:42.879 --> 00:03:59.919
This includes sovereignty of the control plane, a set of services critical for integrating applications with underlying infrastructure, legal sovereignty, ensuring that technology vendors and cloud service providers are governed exclusively by a specific jurisdiction's law.
00:04:00.159 --> 00:04:02.639
A balanced hybrid approach.
00:04:03.199 --> 00:04:12.560
To compete in the AI era, nations must leverage the immense scale, innovation, and flexibility of global public cloud services.
00:04:12.879 --> 00:04:19.120
This necessity, however, creates a fundamental tension with the security imperative to maintain sovereign control.
00:04:19.680 --> 00:04:23.759
A hybrid model is the essential solution to this challenge.
00:04:24.079 --> 00:04:30.639
This approach balances both requirements by acknowledging that not all data requires the same level of protection.
00:04:31.040 --> 00:04:45.680
Sensitive sovereign data is protected on secure platforms and a domestically owned and operated infrastructure layer, while public data sets and citizen-facing services can utilize global hyperscalers to achieve the necessary scale.
00:04:45.920 --> 00:04:57.519
Discover how a global leader in technology and services leveraged a hybrid approach of data and AI with Gen AI to analyze historical cases involving millions of documents and thousands of terabytes.
00:04:57.839 --> 00:05:01.040
Case study A Global Tech Leader.
00:05:02.000 --> 00:05:11.120
A global leader in technology and services shapes universal trends in automation, electrification, digitalization, and connectivity.
00:05:11.360 --> 00:05:18.240
Its strong industrial presence drives innovation to improve processes, including optimizing legal operations.
00:05:18.480 --> 00:05:33.759
As a global enterprise, legal challenges are an inevitable part of operating at scale, but lengthy internal investigations and unwieldy early case assessments were hampering their ability to define next steps in diverting the company from innovating and creating value.
00:05:34.000 --> 00:05:43.279
Inefficient processes led to increased costs and risk, given the absence of technology to support case knowledge and control early in the process.
00:05:43.600 --> 00:05:54.800
The company sought a technology solution to help them make better and faster decisions by quickly processing and analyzing large amounts of internal data and help shape how the legal case proceeded.
00:05:54.959 --> 00:05:57.279
The company adopted a hybrid approach.
00:05:57.439 --> 00:06:03.360
Their legal team used it with Gen AI to crunch vast data sets in the case assessment phase.
00:06:03.600 --> 00:06:11.120
They then used a large language model to ask the relevant questions and get answers within minutes to determine their case strategy.
00:06:11.519 --> 00:06:19.120
The global company was able to transform their legal workflows, enabling faster data-driven decisions and proactive investigations.
00:06:19.360 --> 00:06:24.879
Through AI integration and training, its legal teams were able to deliver superior service.
00:06:25.360 --> 00:06:27.680
Architecture for Sovereignty.
00:06:28.079 --> 00:06:41.439
The architectural framework featured on page 119 provides a high-level view of the critical components for enabling the sovereign data and AI capabilities on an EIM platform for both the public and private sectors.
00:06:41.680 --> 00:06:48.079
This framework ensures that secure services are delivered to customers in an efficient manner, protecting their critical data.
00:06:48.319 --> 00:06:52.720
Key aspects of this architecture include dual data architecture.
00:06:53.040 --> 00:07:04.399
Sensitive data is protected within a sovereign layer, while publicly available data is processed in a hybrid cloud environment, i.e., an environment that integrates public and private cloud.
00:07:05.199 --> 00:07:07.120
Multi-agent AI model.
00:07:07.839 --> 00:07:18.639
Private AI agents operate within the sovereign stack while public AI agents deliver services via hybrid cloud, ensuring secure boundaries and data integrity.
00:07:18.959 --> 00:07:30.800
Extensibility, designed to incorporate additional data sets, data security and governance, adhering to policy and controls around protection and use of data.
00:07:31.120 --> 00:07:36.879
Core principles trust, security, national control, and resilience.
00:07:37.120 --> 00:07:40.480
What follows is a breakdown of the above architecture.
00:07:40.800 --> 00:07:43.360
The infrastructure and network layer.
00:07:44.000 --> 00:07:50.800
Sensitive data is hosted within infrastructure operated by trusted telecommunications and data center providers.
00:07:51.040 --> 00:08:15.680
These environments are engineered to meet the most stringent security and sovereignty requirements, employing zero trust protocols, security frameworks that verify every connection, device, and user continuously rather than assuming any element is safe and air-gapped configurations in which critical systems are physically or logically isolated from public networks to prevent unauthorized access or data leakage.
00:08:15.920 --> 00:08:29.759
Deployments remain within defined national or regional borders, with operations managed exclusively by security-cleared personnel to ensure compliance with all applicable laws, regulations, and defense grade standards.
00:08:29.920 --> 00:08:41.440
For data and workloads that do not require full sovereignty, such as publicly available data sets or citizen and customer-facing digital experiences, the framework incorporates global hyperscalers.
00:08:41.679 --> 00:08:55.200
These platforms provide the skill, flexibility, and advanced tooling needed to support innovation, responsiveness, and cost efficiency, while operating under strict governance boundaries that prevent sovereign data exposure.
00:08:55.360 --> 00:09:06.000
Across both zones, the architecture is unified by a common technology stack integrating capabilities in the areas of data and information management, AI models, and AI applications.
00:09:06.159 --> 00:09:08.159
The operational technology layer.
00:09:08.480 --> 00:09:16.960
The operational technology layer is critical for enabling the deployment of data, AI models, platforms, applications, and AI services.
00:09:17.120 --> 00:09:21.360
It provides the bridge between infrastructure, network, and applications.
00:09:21.600 --> 00:09:26.879
In a multi-cloud and hybrid world, standardization at the operational layer is essential.
00:09:27.120 --> 00:09:34.080
Adopting open protocols and interoperable frameworks allows organizations to maintain portability of workloads.
00:09:34.320 --> 00:09:43.279
The ability to move applications and data seamlessly between on-premises, private, and sovereign clouds without refactoring or security trade-offs.
00:09:43.519 --> 00:09:53.279
This is particularly critical for AI workloads where compute intensity, data gravity, and regulatory constraints demand both flexibility and control.
00:09:53.679 --> 00:09:59.759
Operational technology governance also extends to monitoring, observability, and automation.
00:10:00.320 --> 00:10:09.600
Unified control planes and orchestration tools enforce consistent configurations, patch management, and compliance verification in real time.
00:10:09.919 --> 00:10:22.879
In this sense, the operational layer ensures that every AI deployment, from model training to inference, runs within trusted boundaries, adheres to defined jurisdictions, and scales with confidence.
00:10:23.120 --> 00:10:24.159
The data layer.
00:10:24.320 --> 00:10:30.639
As the foundation for EAI, the data layer must support the needs of both the public and private sectors.
00:10:30.879 --> 00:10:40.480
It enables secure, intelligent, and scalable data management across government and public sectors with the extensibility to support private sector needs.
00:10:40.639 --> 00:10:45.519
The architecture requires support for both explicit and implicit data hierarchies.
00:10:45.679 --> 00:10:53.200
Explicit structures include folder hierarchies, taxonomies, schemas, version control, and audit logs.
00:10:53.440 --> 00:11:03.279
Implicit structures include metadata fields, semantic relationships, ontologies, tags, and usage-based clustering.
00:11:03.519 --> 00:11:14.080
These are woven together using metadata driven orchestration and semantic engines, enabling AI systems to reason across both structured and unstructured data.
00:11:14.399 --> 00:11:16.000
Agentic use cases.
00:11:16.240 --> 00:11:22.240
Agents will drive productivity and efficiency gains while delivering better customer service and business outcomes.
00:11:22.480 --> 00:11:59.360
Some sample agenc use cases include health care, personalized health navigation, benefits eligibility, and virtual triage, housing, application processing, permitting, eligibility screening, and subsidy management, banking, proactive fraud detection, personalized financial guidance, and automated loan processing, transportation, dynamic route optimization, autonomous fleet management, and predictive maintenance, taxation, audit flagging, fraud detection, and support for completing tax filings.
00:11:59.759 --> 00:12:11.919
In the following case study, find out how DNB Finans is using AI and data to streamline the administration of car fleets, detect fraud, and improve satisfaction for their leased car customers.
00:12:12.159 --> 00:12:30.080
Case study DNB Finance DNB Bank Group in Norway is Scandinavia's second largest bank, employing 13,430 people and managing total assets worth 250 billion euros, 273 billion dollars US.
00:12:30.320 --> 00:12:36.159
Its subsidiary, DB Finans, is one of the largest finance companies in the Nordic region.
00:12:36.480 --> 00:12:44.960
In the private sector, the organization has a dominant position in the car financing market with more than 300,000 finance vehicles in its portfolio.
00:12:45.120 --> 00:12:49.759
DNB Penance is always looking for new ways to add value for its customers.
00:12:50.000 --> 00:12:57.440
The most valued services it can offer are those that help businesses control costs by providing greater visibility on their spending.
00:12:57.679 --> 00:13:04.480
To this end, the Auto Lease Division of DB Phenons wanted to deepen the BI it provided its clients.
00:13:04.720 --> 00:13:19.840
For example, the system could provide up-to-date statistics to help customers keep track of all car-related costs, including information about fuel use, COT emissions, leasing costs, damage reports, and fraud alerts.
00:13:20.080 --> 00:13:28.639
At the same time, the company needed to establish customized cost center structures so that clients would be able to monitor activity by business unit.
00:13:28.879 --> 00:13:33.919
It was important to D ⁇ B Phenons that the software would be easy to use without training.
00:13:34.159 --> 00:13:39.919
The goal was to achieve a user experience that was similar to consumer social networks, like Facebook.
00:13:40.159 --> 00:13:47.679
The company rolled out a business intelligence and reporting solution to be used by more than 30,000 leased car customers.
00:13:48.000 --> 00:14:00.320
The solution is highly intuitive, featuring colorful visual representations of data, including dashboards for users and logical controls for fraud detection and easy administration of car fleets.
00:14:00.559 --> 00:14:12.080
Since the deployment, DMB Phenons has seen customer satisfaction levels rise from 4.4 to 5.1 on a scale of 1 to 6 for quality of reporting solution.
00:14:12.320 --> 00:14:16.159
The system has also drawn an additional 31% in user logins.
00:14:16.559 --> 00:14:24.320
Increasing activity on the car financing system, DMB Phenons anticipates a return on investment within a short 2.5 years.
00:14:24.480 --> 00:14:39.840
Its customers now have early visibility into issues like excessive mileage or fuel-related fraud and are able to pinpoint the business units responsible, enhancing their ability to act and increasing their loyalty through valuable business information.
00:14:40.159 --> 00:14:45.679
This solution gives the company a significant competitive differentiator in a crowded marketplace.
00:14:46.000 --> 00:14:47.679
Dual data architecture.
00:14:47.840 --> 00:15:02.240
The diagram featured on page 124 presents a detailed architecture for a secure, dual-zoned data and AI platform, distinguishing between the environments for the non-sovereign or public zone and the sovereign or private zone.
00:15:02.399 --> 00:15:16.000
The purpose of this architecture is to ensure that sensitive enterprise and government data and operations are segregated from public or less sensitive domains while still enabling controlled interactions where necessary in the public domain.
00:15:16.159 --> 00:15:26.799
It addresses the need for secure data in AI while providing flexibility to drive efficiency and cost-effective deployments, enabling improved customer experiences.
00:15:27.039 --> 00:15:28.480
Let's break it down.
00:15:28.799 --> 00:15:31.519
The non-sovereign public zone.
00:15:31.919 --> 00:15:40.480
In a dual sovereign data and AI architecture, the public zone serves as the controlled interface between open knowledge and enterprise intelligence.
00:15:40.639 --> 00:15:50.960
It enables organizations to leverage non-sensitive, publicly available data and AI services without compromising internal sovereignty or compliance obligations.
00:15:51.200 --> 00:16:02.960
By isolating public interactions through secure gateways and sanitization protocols, the public zone allows innovation and external connectivity to thrive within clearly defined governed boundaries.
00:16:03.279 --> 00:16:07.919
This zone is composed of non-sensitive and public AI agents.
00:16:08.240 --> 00:16:15.279
This feature includes interfaces like large language model, LLM, APIs that do not use sensitive data.
00:16:15.519 --> 00:16:24.639
The public agent API layer offers endpoints for accessing data with measures to control usage, secure sessions, and store session data.
00:16:24.960 --> 00:16:27.840
Non-sovereign public data sources.
00:16:28.080 --> 00:16:35.360
Here, the system accesses non-sensitive and public databases, published regulations, and service guides.
00:16:35.519 --> 00:16:41.519
It also uses public knowledge bases to improve the accuracy and relevance of the information it provides.
00:16:41.759 --> 00:16:42.960
Security Controls.
00:16:43.120 --> 00:16:58.000
Security measures include sanitization of personally identifiable information using named entity recognition models to strip sensitive information such as date of birth before any gateway validation.
00:16:58.240 --> 00:17:00.320
The sovereign private zone.
00:17:00.480 --> 00:17:12.079
The sovereign or private zone is the intelligence core of a dual sovereign data and AI architecture, where sensitive, mission-critical operations take place under full organizational control.
00:17:12.400 --> 00:17:22.319
Designed for regulated and high assurance environments, this zone governs the use of private agents, confidential data sources, and secure compute infrastructure.
00:17:22.559 --> 00:17:37.279
Every process, from model training to inference, is executed within a zero trust, air gapped framework, ensuring that national, corporate, or institutional data remains fully sovereign, compliant, and auditable.
00:17:37.599 --> 00:17:40.640
This zone is made up of private agents.
00:17:40.960 --> 00:17:48.400
This capability is reserved for enterprise public sector or private sector users and agents that are accessing sensitive data.
00:17:48.559 --> 00:17:52.480
It features an agentic platform capable of air gapped deployment.
00:17:52.720 --> 00:17:58.000
The private agent API layer here is internal only with zero trust security.
00:17:58.160 --> 00:17:59.680
Sovereign data sources.
00:17:59.920 --> 00:18:08.400
This includes protected databases that contain sensitive information, including HR or finance data, as well as sensitive departmental records.
00:18:08.640 --> 00:18:18.799
The Retrieval Augmented Generation RAG pipeline in this context uses protected knowledge sources, including legal precedents, to produce accurate AI results.
00:18:19.039 --> 00:18:28.400
RAG is essential in enterprise AI because it gives models governed access to relevant knowledge at runtime rather than relying solely on what they were trained on.
00:18:28.640 --> 00:18:41.680
Early implementations, often called naive RAG, simply retrieved chunks of text and inserted them into prompts, which could be imprecise and prone to hallucination when context did not fully align.
00:18:42.000 --> 00:18:47.119
Graph-based RAG RAG represents the next evolution.
00:18:47.279 --> 00:18:56.160
It structures enterprise knowledge as relationships and entities, enabling the model to retrieve not just documents but the right contextual meaning.
00:18:56.400 --> 00:19:08.000
As a result, Graph RAG significantly improves precision, traceability, and trust, reducing the need for oversized prompts and brittle context stuffing.
00:19:08.160 --> 00:19:13.759
Today, enterprises have three primary methods for providing context to AI models.
00:19:14.000 --> 00:19:26.319
Large and well-crafted prompts within expanded context windows, RAG, graph RAG retrieval pipelines, and model tuning, including fine tuning and embedding optimization.
00:19:26.559 --> 00:19:42.880
The future of enterprise AI lies in orchestrating these intelligently, shifting from manual prompt engineering towards governed, structured, and scalable context pipelines that enable AI systems to reason with enterprise knowledge securely and reliably.
00:19:43.200 --> 00:19:49.200
Processing infrastructure provides the accelerated compute capacity for secure workloads.
00:19:49.440 --> 00:19:57.279
This includes an immutable audit trail database for compliance oversight and optional fine-tuning of LLM models.
00:19:57.599 --> 00:20:00.160
Shared components and security measures.
00:20:00.400 --> 00:20:13.440
Between these zones lies an API gateway enforcing strict authentication, authorization, protocols, including identity verification via Access Control Federation and Multifactor Authentification, MFA.
00:20:13.599 --> 00:20:18.160
Data classification mechanisms auto-tag content by sensitivity level.
00:20:18.319 --> 00:20:22.400
Data loss prevention tools block sensitive data leakage across boundaries.
00:20:22.559 --> 00:20:27.440
A query router directs requests to the appropriate zone based on classification level.
00:20:27.599 --> 00:20:36.480
Only declassified for public responses are allowed back into the non-sovereign domain after protected data removal, the infrastructure and network layer.
00:20:36.720 --> 00:20:43.680
Both zones leverage robust infrastructure and network layers, ensuring physical and or logical separation where required.
00:20:43.839 --> 00:20:48.240
Sovereign data is not a new concept, a history of private sector use cases.
00:20:48.480 --> 00:20:55.119
Private sector use cases across regulated and unregulated industries can help to frame and shape this sovereign architecture.
00:20:55.359 --> 00:21:03.119
Protecting private and sensitive data has been a necessity for decades, and strong information management has been critical to enabling it.
00:21:03.359 --> 00:21:14.559
The following feature about Transport Canada demonstrates how effective information management brings secure content to the fingertips of people and integrates critical content with business processes.
00:21:14.880 --> 00:21:27.359
Case study Transport Canada Transport Canada's mission is to serve the public interest through the promotion of a safe, secure, efficient, and environmentally responsible transportation system in Canada.
00:21:27.519 --> 00:21:44.720
This requires effective information management to facilitate timely and informed decision making among an extensive list of portfolio partners that include 15 crown corporations, 17 port authorities, and 21 airport authorities, as well as other shared governance organizations.
00:21:45.039 --> 00:21:59.759
Concerned about the dissemination of information through electronic means, privacy assurances, corporate memory loss due to employee turnover, and the need for real time access to information to satisfy requests and litigation concerns, the government.
00:22:00.240 --> 00:22:07.920
Of Canada, GC, championed an e-government solution based on records, documents, and information management.
00:22:08.240 --> 00:22:21.920
Transport Canada was the first Canadian government department to complete an e-government deployment, with more than 4 million records in a single library and 5,200 users to date at more than 117 sites.
00:22:22.160 --> 00:22:26.160
The largest single library deployment in the Canadian public sector.
00:22:26.480 --> 00:22:44.880
Working as an integrated set of tools that facilitates the full use of electronic documentation, from capture and storage to organization, retrieval, sharing, reuse, protection, and disposal of information, the solution has become a mission-critical application for Transport Canada's managers and staff.
00:22:45.039 --> 00:23:02.400
It has helped the organization ensure the accuracy of its corporate records, unite a geographically dispersed and mobile workforce, meet legal obligations, including e-discovery requirements, improve productivity, and align information management with the Government Online GOL initiative.
00:23:02.640 --> 00:23:14.640
Using this system, Transport Canada has tripled productivity savings up to$4.6 million and expects further growth, staying on target to meet its annual cost avoidance savings estimate.
00:23:14.799 --> 00:23:19.200
As a result, the system paid for itself in just 1.17 years.
00:23:19.359 --> 00:23:30.160
As cloud adoption has increased over the last several years, most enterprises are often in a hybrid model of deployment across on-premises, data centers, and public cloud environments.
00:23:30.400 --> 00:23:37.680
It is only natural as AI adoption increases that these proven deployment models evolve to support a hybrid model for AI.
00:23:37.839 --> 00:23:56.160
Bundes Resinzentrum, BRZ, in Austria opted for a hybrid approach, leveraging a cloud-based information management system to consolidate and govern sensitive data across 12 government customers, 40 government applications, more than 10 ERP systems and mailing systems.
00:23:56.400 --> 00:24:00.400
Case study Bundes Resinzentrum, BRZ.
00:24:00.799 --> 00:24:06.880
The Federal Computing Center, BRZ, is the IT service provider of the Austrian public administration.
00:24:07.039 --> 00:24:22.480
With 1,200 employees and a total annual turnover of 265.3 million euro, the BRZ successfully develops and provides e-government services for ministries, universities, social security providers, and public organizations.
00:24:22.720 --> 00:24:32.640
The BRZ deploys 320 IT processes, equips 1,200 locations throughout Austria with infrastructure, and services about 30,000 workplaces.
00:24:32.880 --> 00:24:40.240
In 2000, the land and commercial registers of the Austrian Ministry of Justice were a typical example of process fragmentation.
00:24:40.480 --> 00:24:51.039
While the land registry data had been managed digitally since the 1980s, the original documents remained in the physical archives of courthouses and were inaccessible within processes.
00:24:51.279 --> 00:24:58.000
Moreover, the Ministry of Justice incurred the huge costs of archive maintenance and the risk of losing original documents.
00:24:58.319 --> 00:25:04.640
BRZ decided to address the issue by implementing an enterprise content management ECM solution.
00:25:04.799 --> 00:25:14.400
As the pilot study for the land registry was implemented, BRZ received more requests from administrations to manage documents electronically and integrate processes.
00:25:14.640 --> 00:25:24.480
In response, BRZ built a scalable ECM infrastructure called the eGov Archive Service, the first ever Austrian private ECM cloud service.
00:25:24.640 --> 00:25:33.759
The solution provided a robust platform for 12 government customers, 40 government applications, more than 10 ERP systems and mailing systems.
00:25:33.920 --> 00:25:55.359
The eGov Archive Service manages 45 terabytes TB of data or 400 million objects, serves approximately 1 million transactions per day, and is accessed by 30,000 users, tax auditors, judges, police, customs officials, HR staff, and accountants, and potentially every Austrian citizen.
00:25:55.599 --> 00:26:11.279
Services include everything from managing, accessing, routing, and searching to legally compliant archiving of all kinds of documents, as well as tight integration with line of business and enterprise resource planning, ERP systems, for a comprehensive cloud solution.
00:26:11.519 --> 00:26:13.759
Foundation for Agentic AI.
00:26:14.160 --> 00:26:19.839
Unlocking the world's private data is the central challenge for the next wave of artificial intelligence.
00:26:20.160 --> 00:26:24.400
This chapter has provided the architectural blueprint to do so securely.
00:26:24.559 --> 00:26:32.400
The solution is a hybrid dual zone model that establishes a secure private zone for sensitive assets and a public zone for other workloads.
00:26:32.559 --> 00:26:47.920
This model creates a secure environment where private AI agents can analyze and act on protected enterprise or government data without risk of leakage, while public AI agents handle non-sovereign tasks, balancing control with scale and competitiveness.
00:26:48.480 --> 00:26:59.759
This architecture is the essential foundation for activating advanced AI, providing the trust and control needed for widespread deployment of agentic AI, the subject of our next chapter.
00:27:00.000 --> 00:27:01.839
The FAST 5 Download.
00:27:02.160 --> 00:27:02.720
1.
00:27:02.960 --> 00:27:04.720
Mandate sovereign data control.
00:27:05.200 --> 00:27:11.359
Prioritize and enforce full control over national and organizational data and digital infrastructure.
00:27:11.599 --> 00:27:20.400
Establish policies and technical measures to prevent external influence, ensure data residency, and maintain compliance with domestic regulations.
00:27:20.720 --> 00:27:21.200
2.
00:27:21.519 --> 00:27:24.799
Implement a dual zone hybrid AI architecture.
00:27:25.039 --> 00:27:37.519
Separate sensitive data and workloads onto secure, domestically operated infrastructure, leverage public cloud platforms only for non-sensitive, scalable applications to balance innovation with security.
00:27:37.839 --> 00:27:38.319
3.
00:27:38.640 --> 00:27:41.759
Deploy multi-agent AI models strategically.
00:27:42.000 --> 00:27:47.839
Activate private AI agents within protected zones to analyze and act on sensitive data.
00:27:48.079 --> 00:27:56.799
Use public AI agents for non-sovereign tasks, enabling organizations to scale AI innovation without compromising protected assets.
00:27:57.039 --> 00:27:57.519
4.
00:27:57.839 --> 00:28:00.720
Enforce rigorous governance and security.
00:28:00.960 --> 00:28:07.759
Apply strict authentication, advanced data classification, and robust data loss prevention tools.
00:28:08.000 --> 00:28:17.279
Ensure all critical activities are logged with immutable audit trails and operate under zero trust protocols for maximum oversight and resilience.
00:28:17.599 --> 00:28:21.839
Five, accelerate adoption of proven hybrid architectures.
00:28:22.079 --> 00:28:27.920
Adopt best practices from regulated sectors that have successfully managed hybrid environments.
00:28:28.160 --> 00:28:38.400
Invest in the secure integration of private and public cloud infrastructure to unlock and leverage the 90% of private data critical for next generation AI.
