Oracle expands its data centres in the Gulf as digital sovereignty becomes a factor in physical risk calculations
The question of where data reside is no longer a postponed technical issue in the Gulf. Oracle says it is expanding the number of its data centres in the United Arab Emirates and Saudi Arabia, while geopolitical tensions raise an additional question for companies: what happens to digital sovereignty when the data centre itself becomes exposed to a physical risk?
The company already has cloud regions in Dubai and Abu Dhabi, and in Jeddah and Riyadh, and it had announced plans for a centre in the Neom project. The National, an English-language newspaper in the UAE, quoted Kormak Waters, Oracle’s executive vice-president for applications in Europe, the Middle East and Africa, as saying the company added roughly two new centres in the past six months, and that further centres will arrive in the next six months. The motive he mentioned is clear: demand for artificial intelligence is large.
Location alone is not enoughIn Oracle’s definition, digital sovereignty goes beyond keeping data inside the country. The report defines sovereign artificial intelligence as the production and local deployment of AI, including infrastructure, data, models and local talent. But Waters adds to this formulation a continuity question: who has the ability to access or halt the data, and can the service remain legally and operationally under a single sovereignty if its physical infrastructure moves elsewhere?
From this, the company puts forward the idea of a “digital embassy”. The concept, as described in the source, is the ability to move a sovereign cloud architecture from one city to another country when a physical threat arises, while preserving its legal and operational sovereignty. This option is more available to a provider with global reach, but it is not a simple decision for regulated institutions such as banks, because regulatory approvals remain part of the process.
Demand precedes detailed announcementOracle says it is cautious about revealing the locations of its new centres because of the geopolitical situation. Conversely, it confirms its expansion in the United Arab Emirates and Saudi Arabia, markets where it already has an established presence. Waters describes the Middle East as the fastest-growing sub-region for the company within Europe, the Middle East and Africa, and also points to opportunities in Qatar, Kuwait and Syria.
This same caution is important when reading the report. The expansion is confirmed in the source, but the company does not disclose the specific locations of the new centres. Therefore, the announcement should not be treated as a complete map of capacities or as a commitment to a specific operational timeline for each site. What the text confirms is an increase in number during the recent period and a plan for more centres, not any undisclosed engineering or regulatory details.
For a reader working in the Gulf, this is not just a story about server capacities. Companies handling sensitive data will find that the choice between a local provider, regional reach and an off-site recovery option can no longer be separated easily. The source does not say that the “digital embassy” model has become an established standard, but it shows that continuity, location and the controlling party have become a single topic in strategic transformation discussions.
What changes in the decisionThe announced expansion adds hosting options within the United Arab Emirates and Saudi Arabia, but it does not on its own resolve sovereign data residency requirements or sectoral regulatory approvals. Therefore, the practical point remains to examine the data’s location, its path during disaster recovery, and control privileges before turning a sovereign-cloud promise into an operational commitment. In sectors that require special approvals, the source explicitly notes that portability does not imply bypassing regulation.