Pakistan AI sovereignty is no longer a theory discussed at conferences, it is a live, urgent policy debate that every government agency, bank, startup and enterprise must understand right now. The inauguration of the Sky47 Karakoram-01 data centre on 24 July 2026 lit the fuse, and a pointed Business Recorder opinion piece published on 14 August 2026 made the debate impossible to ignore.
What Is the Sky47 Karakoram-01 Data Centre?
On 24 July, Prime Minister Shehbaz Sharif and Field Marshal Asim Munir inaugurated Sky47’s Karakoram-01 near Islamabad, an 8.5MW AI-ready data centre and sovereign-cloud facility. Five days later, the prime minister directed federal institutions to begin integrating with it.
Sky47 Karakoram-01 has been designed as a high-performance computing (HPC) and sovereign cloud platform capable of supporting enterprise-scale AI workloads and mission-critical digital operations. Sky47 Limited, a majority-owned subsidiary of Mari Energies Limited listed on the PSX, owns the facility, and Chinese technology company ZTE was the key project partner in building it.
A second 5MW facility is under development at Karachi’s Port Qasim and should be ready by September 2026, while a Lahore node is also planned, creating a three-city network with geographic redundancy.
For a deeper look at what the facility does and how it works, see our earlier piece on Sky47 Karakoram-01 and Pakistan’s sovereign AI cloud.
Pakistan AI Sovereignty: The Debate the Launch Sparked
The government called the project a symbol of digital independence. Critics and analysts pushed back with a harder question: does keeping data inside Pakistan’s borders actually make Pakistan sovereign over its AI systems?
It is important to recognise that data residency is not sovereignty. Data residency asks where information is stored. Sovereignty asks who controls access and encryption keys, who can audit the infrastructure, whether workloads can be moved elsewhere, whether suppliers can realistically be replaced, and whether Pakistani engineers can operate and modify the systems themselves.
Put simply: the data may never leave Pakistan, but the dependency still might. That is the uncomfortable truth at the heart of the Pakistan AI sovereignty debate.
The ZTE Factor: A Dependency Question
Sky47 was built with Chinese tech giant ZTE as the key technology partner. This raises a pointed question: if Pakistan’s most important AI infrastructure relies on foreign hardware and software stacks, can the country truly call it sovereign? Analysts note this is not unique to Pakistan, even wealthy nations depend on foreign chips and cloud platforms, but it matters far more when the infrastructure hosts defence records, national identity data and payment rails.
What Real Sovereignty Looks Like
Pakistan does not need technological self-sufficiency. It needs selective technological sovereignty. That means retaining tight national control where failure or compromise could cause severe national harm, defence systems, national identity, essential payment infrastructure, critical government records and the most sensitive citizen data. These require Pakistani jurisdiction, control over critical access and domestic operating capability.
In other words, it is not practical or even desirable to build every chip locally. But for systems that keep the country running, Pakistan must be able to say no to a foreign vendor without the lights going out.
The National Data Governance Policy 2026 Adds a Legal Layer
Pakistan has unveiled its National Data Governance Policy 2026, declaring government data a national asset and establishing comprehensive rules for data sovereignty, privacy, AI, and citizens’ digital rights.
Government agencies deploying AI systems that make legally significant decisions will be required to ensure explainability, continuous monitoring, meaningful human oversight and public transparency. Public bodies will also have to publish details of automated decision-making systems in a public registry maintained by the PDA.
The policy makes clear that commercialisation cannot override citizens’ privacy rights or compromise Pakistan’s sovereign control over critical government databases. This is the legal backbone that must sit behind physical infrastructure like Sky47. A data centre without a governance framework is just a building.
Separately, Data Vault Pakistan has signed a three-year contract with the National Telecommunication Corporation (NTC) to provide sovereign AI services to the federal government. The agreement aims to support the development of nationally managed artificial intelligence infrastructure, and under the contract, Data Vault Pakistan will deploy NVIDIA AI infrastructure, including H200, B200 and A100 GPU platforms. This is significant because it shows Pakistan is also sourcing compute from US chip-maker NVIDIA, not only from Chinese partners, a deliberate diversification that reduces single-supplier risk.
Why This Matters for Pakistani Enterprises and Startups
For a startup building an AI product or a bank migrating its core systems to the cloud, Pakistan AI sovereignty is not just a political talking point. It affects real decisions about where to host data, which vendor contracts to sign and what happens if a foreign supplier walks away or faces sanctions.
Policymakers must recognise that data sovereignty in the digital age is becoming as crucial as territorial sovereignty in the traditional sense. Nations that fail to securely store and process their own data risk losing control over vital economic, governmental, and social information.
As JazzWorld’s Chief AI Officer Aamer Ejaz put it, sovereignty in an interconnected AI economy depends on design choices rather than isolation. “In a globally connected AI ecosystem, sovereignty is about strategic choices, not isolation.”
That is practical advice. Enterprises should not wait for the government to solve this. They can start by auditing which of their critical workloads run on foreign infrastructure, what exit rights they have in their contracts and whether their IT teams could operate those systems without the vendor’s support team on speed-dial.
The Road Ahead
Sky47 Karakoram-01 is a genuine milestone. Pakistan now has a physical, domestic AI-ready data centre, something it did not have before July 2026. But the business and policy work has barely started. Building local AI talent, training Pakistani engineers to operate and audit these systems, writing enforceable data-localisation laws with real teeth and diversifying hardware suppliers are all tasks that a ribbon-cutting cannot finish.
The Business Recorder piece published on Independence Day put it directly: Pakistan needs selective technological sovereignty, not a checkbox. The Sky47 launch opened the question. The next few years will determine whether Pakistan answers it well.
Frequently Asked Questions
What is Sky47 Karakoram-01?
It is Pakistan’s first purpose-built, AI-ready Tier III/IV data centre and sovereign cloud platform, inaugurated in July 2026 near Islamabad with an initial capacity of 8.5MW. It is owned by Sky47 Limited, a subsidiary of Mari Energies, and was built with ZTE as the technology partner.
Is data residency the same as digital sovereignty?
No. Data residency means data is stored inside Pakistan’s borders. Sovereignty means Pakistan controls the encryption keys, can audit the systems, can replace the vendor and has local engineers capable of running the infrastructure independently. A country can have data residency without having sovereignty.
Why does Pakistan AI sovereignty matter for businesses?
If critical business or government data runs on foreign infrastructure that Pakistan cannot audit or replace, that dependency becomes a strategic weakness. Sanctions, vendor disputes or geopolitical shifts can cut access at any time. Enterprises that plan for sovereign-grade hosting now avoid a very expensive scramble later.
What is Pakistan’s National Data Governance Policy 2026?
It is a policy issued by the Ministry of IT and Telecommunication that declares government data a national asset. It sets rules on data sovereignty, privacy, AI oversight and cross-border data transfers. It requires explainability and human oversight for AI systems that make legally significant decisions about citizens.
