Cloud Engine nodes are already being tested across AWS, Google Cloud, and Microsoft Azure using a private subnet model that does not rely on any single provider’s control plane . This means an organisation can run across multiple hyperscalers simultaneously or migrate entirely from one to another with zero disruption .

DFINITY argues that conventional clouds cannot offer tamperproof infrastructure, always-on functionality, and freedom from lock-in because their trust model depends on the provider’s goodwill. Cloud Engine replaces that with cryptographically enforced execution and data residency .

Real-World Demonstrations: Swiss Subnet and Pakistan Subnet

Swiss Subnet (Davos, January 2026). DFINITY launched the first national subnet at the World Economic Forum, running entirely on 13 independent node providers located inside Switzerland . The subnet provides “cryptographically verifiable data sovereignty through an open protocol” rather than contractual assurances from a hyperscaler .

Pakistan National Subnet (MoU signed February 10, 2026). The Pakistan Digital Authority and DFINITY signed an MoU to build a dedicated Pakistan Subnet—the first nation-state-scale decentralised sovereign cloud deployment . The subnet will host tamper-resistant government applications, AI-native software, and a national messenger app . Pakistan’s deployment is architecturally identical to the Swiss model . As part of the partnership, DFINITY will support the creation of a dedicated subnet and establish a local presence in Pakistan .

Williams’s Argument: Sovereignty via Cryptography, Not Geography

Williams is sharply critical of what he calls “sovereignty washing”—the practice of placing a European flag on American software. His key claims:

• Geography alone is meaningless under US law. “A regional data centre running American software under American legal jurisdiction is not sovereign but a dependency with a different label,” Williams said . Because the US CLOUD Act forces American providers to hand over data regardless of where it is stored, contractual promises of data protection cannot override legislation . Genuine sovereignty requires the infrastructure to be unable to comply with foreign orders, not merely promising not to .
• Cryptographic enforcement, not contractual trust. The Internet Computer’s design means “not even the operator can read your data (and you can prove it)” . Sovereignty is “enforced by the technology itself rather than by agreements with cloud providers” .
• The EU’s approach is “too little too late.” Williams called the EU’s Tech Sovereignty Package “being written by people who don’t understand the implications” and said “most sovereign cloud today is just a hyperscaler product with a flag on it” .

The Caffeine AI Dimension: Shifting Software Creation from Developers to Product Managers

Caffeine is an AI platform that builds production apps from natural language. Launched by DFINITY in October 2025, Caffeine lets users create and maintain web applications by describing what they want in natural language; the system generates the interface, backend logic, and data structure automatically . By early 2026, Caffeine V2 already had “hundreds of thousands of distinct builders” per month, with V3 expected “in weeks, not months” .

Who controls the software? Because Caffeine removes traditional coding from the loop, the person making software creation decisions can be a product manager, a government official, or any non-technical user—not just a developer . Williams frames this as a sovereignty question: if AI writes the software, whose rules govern the AI and the runtime? If the AI platform runs on a foreign hyperscaler, the software’s behaviour is ultimately subject to that provider’s jurisdiction, regardless of where the user is located .

Pakistan’s MoU includes 1,500 Caffeine AI licenses for government, academia, and startups , making the country a test case for AI-native sovereign software creation. The logic is that if an AI platform is the author of national applications, the platform itself must run on cryptographically sovereign infrastructure, not on a US hyperscaler .

Cloud Engine nodes are already being tested across AWS, Google Cloud, and Microsoft Azure using a private subnet model that does not rely on any single provider’s control plane . This means an organisation can run across multiple hyperscalers simultaneously or migrate entirely from one to another with zero disruption .

DFINITY argues that conventional clouds cannot offer tamperproof infrastructure, always-on functionality, and freedom from lock-in because their trust model depends on the provider’s goodwill. Cloud Engine replaces that with cryptographically enforced execution and data residency .

Real-World Demonstrations: Swiss Subnet and Pakistan Subnet

Swiss Subnet (Davos, January 2026). DFINITY launched the first national subnet at the World Economic Forum, running entirely on 13 independent node providers located inside Switzerland . The subnet provides “cryptographically verifiable data sovereignty through an open protocol” rather than contractual assurances from a hyperscaler .

Pakistan National Subnet (MoU signed February 10, 2026). The Pakistan Digital Authority and DFINITY signed an MoU to build a dedicated Pakistan Subnet—the first nation-state-scale decentralised sovereign cloud deployment . The subnet will host tamper-resistant government applications, AI-native software, and a national messenger app . Pakistan’s deployment is architecturally identical to the Swiss model . As part of the partnership, DFINITY will support the creation of a dedicated subnet and establish a local presence in Pakistan .

Williams’s Argument: Sovereignty via Cryptography, Not Geography

Williams is sharply critical of what he calls “sovereignty washing”—the practice of placing a European flag on American software. His key claims:

• Geography alone is meaningless under US law. “A regional data centre running American software under American legal jurisdiction is not sovereign but a dependency with a different label,” Williams said . Because the US CLOUD Act forces American providers to hand over data regardless of where it is stored, contractual promises of data protection cannot override legislation . Genuine sovereignty requires the infrastructure to be unable to comply with foreign orders, not merely promising not to .
• Cryptographic enforcement, not contractual trust. The Internet Computer’s design means “not even the operator can read your data (and you can prove it)” . Sovereignty is “enforced by the technology itself rather than by agreements with cloud providers” .
• The EU’s approach is “too little too late.” Williams called the EU’s Tech Sovereignty Package “being written by people who don’t understand the implications” and said “most sovereign cloud today is just a hyperscaler product with a flag on it” .

The Caffeine AI Dimension: Shifting Software Creation from Developers to Product Managers

Caffeine is an AI platform that builds production apps from natural language. Launched by DFINITY in October 2025, Caffeine lets users create and maintain web applications by describing what they want in natural language; the system generates the interface, backend logic, and data structure automatically . By early 2026, Caffeine V2 already had “hundreds of thousands of distinct builders” per month, with V3 expected “in weeks, not months” .

Who controls the software? Because Caffeine removes traditional coding from the loop, the person making software creation decisions can be a product manager, a government official, or any non-technical user—not just a developer . Williams frames this as a sovereignty question: if AI writes the software, whose rules govern the AI and the runtime? If the AI platform runs on a foreign hyperscaler, the software’s behaviour is ultimately subject to that provider’s jurisdiction, regardless of where the user is located .

Pakistan’s MoU includes 1,500 Caffeine AI licenses for government, academia, and startups , making the country a test case for AI-native sovereign software creation. The logic is that if an AI platform is the author of national applications, the platform itself must run on cryptographically sovereign infrastructure, not on a US hyperscaler .