THE SCENARIO: A mid-sized nation in Southeast Asia wakes to find its internet reduced to a crawl. A fishing trawler accidentally dragged its anchor across a submarine cable 40 kilometres offshore. The cable, owned by a consortium of foreign telecommunications companies and a Silicon Valley hyperscaler, carries 60 percent of the country’s international data traffic. Repairs require a specialised cable-laying vessel currently stationed in the Mediterranean, three weeks away. During the outage, government services stall, financial transactions fail, and hospitals lose access to cloud-based diagnostic systems. The repair bill arrives nine months later, its terms dictated entirely by the consortium’s standard contract.
No warships were involved. No sanctions were imposed. No cyberattack was launched. The sovereignty loss did not come through conflict. It came through quiet infrastructure dependency, the kind that accumulates gradually and reveals itself only when something breaks. The physical cables beneath the ocean have become the most consequential geopolitical assets of the digital age, yet most nations have no stake in them and no plan to acquire one.
The Question
Who owns the physical infrastructure that carries a nation’s data, and what does it mean for sovereignty when the answer is “someone else”?
Part One: Deep Dives
The global internet rests on approximately 500 active submarine cables spanning over 1.4 million kilometres of ocean floor. These cables, each no thicker than a garden hose, carry more than 95 percent of all international data traffic. Every email, every financial transaction, every video call that crosses a border travels through them. They are the circulatory system of the digital economy, and yet they are almost entirely owned and operated by private consortia, predominantly headquartered in a handful of countries.
The ownership structure of submarine cables has shifted dramatically over the past two decades. Historically, cables were built by telecommunications consortiums involving national carriers from multiple countries. Each participating carrier owned a portion of the capacity and had a seat at the governance table. The model ensured distributed control and aligned incentives. Today, the dominant builders are no longer telecom carriers but content providers and cloud platforms. Google, Meta, Microsoft, and Amazon now own or lease more capacity on submarine cables than any telecommunications company in history.
This shift from carrier-led to platform-led infrastructure has profound sovereignty implications. When a national telecom carrier co-owned a cable, the government had a direct relationship with the owner, often through regulatory oversight, partial state ownership, or national security agreements. When a foreign technology platform owns the cable, the relationship is fundamentally different. The platform answers to shareholders in a different jurisdiction, operates under different legal frameworks, and has no structural incentive to prioritise the sovereignty interests of the countries through which its cables pass.
The sovereignty risk embedded in submarine cable infrastructure operates on four distinct dimensions. The first is physical vulnerability. A single cable carries terabits of data per second, and a single cable cut can isolate entire regions. While most networks are designed with redundancy, that redundancy depends on the availability of alternative routes, and those alternative routes are frequently owned by the same small set of companies. When all paths to the global internet pass through infrastructure controlled by a single commercial entity or a tight consortium, the concept of redundancy becomes a polite fiction.
The second dimension is jurisdictional asymmetry. Submarine cables are governed by a patchwork of international law, including the United Nations Convention on the Law of the Sea, which grants freedom to lay cables on the high seas but leaves coastal state jurisdiction ambiguous in many scenarios. When a cable is cut, the legal framework for determining liability, compelling repair, or even demanding transparency about traffic routing is remarkably thin. A nation whose data flows through a foreign-owned cable has far fewer legal tools than it imagines.
The third dimension is economic capture. Cable landing stations, the physical points where submarine cables connect to terrestrial networks, have become chokepoints of extraordinary economic value. A country that hosts multiple cable landing stations can position itself as a regional digital hub, attracting data centre investment and technology sector jobs. Conversely, a country that lacks cable landing infrastructure becomes a digital colony, dependent on neighbouring nations for connectivity and paying transit fees that function as a de facto tax on digital participation.
The fourth dimension is intelligence vulnerability. Submarine cables carry unencrypted traffic, encrypted traffic, and everything in between. The physical cable itself is a point of potential interception. While tapping a submarine cable is technically demanding, it has been done, and the capacity to do so is concentrated in a small number of state actors with advanced naval capabilities. A nation whose international data traffic flows through cables owned or accessed by a foreign power is effectively ceding signals intelligence access to that power, whether or not any formal agreement exists.
These four dimensions do not operate in isolation. They compound. A nation with limited cable ownership is simultaneously more vulnerable to physical disruption, more constrained in legal recourse, more exposed to economic extraction, and more transparent to foreign intelligence gathering. The result is a sovereignty deficit that no amount of domestic cybersecurity spending can close, because the vulnerability is not in the code but in the conduit.
The historical pattern of submarine cable investment reveals a structural dynamic that sovereignty-minded policymakers must understand. Cables are built where traffic is expected to grow, and traffic grows where cables are built. This creates a self-reinforcing cycle. Well-connected regions attract digital investment, which generates more traffic, which justifies more cable construction. Poorly connected regions remain poorly connected, not because the demand does not exist, but because the initial infrastructure investment required to unlock that demand is prohibitive without strategic state intervention.
The hyperscaler-led cable boom of the past decade has accelerated this dynamic. When a major technology platform decides to build a new cable route, it does so based on its own projected capacity needs, not on the connectivity needs of the countries along the route. A cable connecting Singapore to Los Angeles might pass through several Pacific island nations that could benefit enormously from a branching unit providing local connectivity. Whether those nations get access depends entirely on the commercial calculations of the platform owner, not on any principle of equitable digital development.
The geopolitical dimension of cable infrastructure has intensified dramatically in recent years. Submarine cables have become objects of strategic competition, with major powers investing in cable construction as an instrument of influence. The country that builds and controls the cable infrastructure connecting a region gains not just economic advantages but also the capacity to shape the information environment, to monitor data flows, and to exercise leverage in moments of tension. Cable infrastructure is no longer merely commercial. It is strategic infrastructure of the highest order.
The sovereignty implications extend beyond the cables themselves to the terrestrial infrastructure that supports them. Cable landing stations are concentrated in a small number of locations, often in politically stable, economically developed countries with strong legal protections for property rights. This concentration is rational from a commercial perspective. It reduces operational risk and simplifies maintenance. From a sovereignty perspective, however, it means that a country’s digital gateway to the world is physically located in someone else’s jurisdiction, subject to someone else’s laws, and accessible to someone else’s intelligence services.
Consider the routing implications. A data packet travelling from a government ministry in one African country to a government ministry in a neighbouring African country might travel through a submarine cable to a landing station in Europe, transit through a data centre in London or Marseille, and then travel back through another submarine cable to its destination 200 kilometres from its origin. The entire journey is mediated by infrastructure owned by companies incorporated in jurisdictions far from either endpoint. The data is subject to surveillance laws, data retention mandates, and disclosure requirements of every jurisdiction it passes through, none of which the originating country can influence.
The sovereignty deficit in physical internet infrastructure cannot be solved by encryption alone. Encryption protects the content of data in transit. It does not protect the transit itself. A nation whose data routes are controlled by others is vulnerable not to decryption but to denial.
Seven-Layer Stack Audit: Physical Internet Infrastructure Sovereignty
At the physical infrastructure layer, sovereignty requires ownership or assured access to the cables, landing stations, and terrestrial backhaul networks that carry data across borders. Nations that own no submarine cable capacity and host no landing stations operate at a fundamental sovereignty deficit. The risk is not theoretical. In 2022, when a volcanic eruption severed the sole submarine cable connecting Tonga to the global internet, the nation was offline for five weeks. It had no alternative route, no redundant infrastructure, and no sovereign capacity to accelerate repairs. The outage was not an act of aggression. It was an act of geology. The sovereignty failure was the absence of any Plan B.
At the data link layer, sovereignty is determined by who controls the switching and routing infrastructure at cable landing points. The optical transport equipment that converts light pulses into routable data is proprietary, vendor-specific, and frequently managed remotely by the equipment manufacturer. A landing station operated by a foreign consortium with remote access granted to a vendor in a third country creates a chain of sovereignty dependencies that is remarkably difficult to audit. Every link in that chain is a potential point of control, interruption, or surveillance.
At the network layer, sovereignty is shaped by IP transit agreements and peering arrangements. A country that purchases IP transit from a foreign provider is fundamentally dependent on that provider for its connectivity to the global internet. The transit provider decides which routes are available, which networks are reachable, and at what cost. In moments of geopolitical tension, a transit provider subject to sanctions or export controls in its home jurisdiction may be legally compelled to disconnect customers in other countries, regardless of the commercial contract in place.
At the transport layer, sovereignty is affected by the physical path that data packets take. The Border Gateway Protocol, which governs routing decisions on the global internet, is not designed with sovereignty in mind. It optimises for efficiency and cost, not for jurisdictional boundaries or national security. A packet from one domestic server to another can, and frequently does, transit through foreign infrastructure simply because the routing table says it should. There is no inherent mechanism in the internet’s architecture that respects national borders.
At the session layer, sovereignty concerns arise around the management interfaces for cable infrastructure. The network management systems that monitor cable health, detect faults, and provision capacity are typically centralised and remotely accessible. When these systems are hosted in a foreign cloud and managed by a foreign operations team, the physical cable may terminate in a domestic landing station, but the operational control of that cable resides elsewhere. The distinction between physical presence and operational control is one of the most significant unexamined sovereignty gaps in digital infrastructure.
At the presentation layer, sovereignty manifests through the protocols and standards that govern how data is formatted and encrypted on the cable. These standards are set by international bodies where representation is uneven and influence correlates with technical and economic power. A country that does not participate in standards development for submarine cable technology is effectively accepting standards designed by others, with sovereignty implications embedded in technical specifications that few policymakers ever read.
At the application layer, sovereignty is ultimately about what the cable carries and for whose benefit. A cable built primarily to serve the content delivery needs of a foreign platform carries traffic that generates economic value for the platform’s home jurisdiction. The data flowing through the cable represents economic activity, cultural influence, and information control. When the cable’s capacity is allocated based on commercial priorities set in a foreign boardroom, the sovereign nation at the receiving end has little say in how its digital economy is shaped by the infrastructure that enables it.
Part Two: Sovereignty Test Matrix
The Sovereignty Test Matrix applies five domains of sovereignty assessment to a nation’s submarine cable and physical internet infrastructure position. Each domain is evaluated on a scale of one to five, where one represents complete dependence and five represents full sovereign control.
In the political domain, the assessment examines whether a nation’s connectivity depends on cables owned or controlled by foreign state actors or foreign corporations subject to foreign legal compulsion. A nation whose primary international connectivity flows through cables owned by companies incorporated in a single foreign jurisdiction scores low on political sovereignty. The capacity of that foreign jurisdiction to impose sanctions, require data disclosure, or compel service interruption creates a political dependency that no domestic law can neutralise. Most nations score between two and three on this domain, reflecting significant political exposure through infrastructure ownership.
In the economic domain, the assessment considers the cost structure of international connectivity and who captures the economic returns. Cable ownership confers the ability to set transit prices, to allocate capacity, and to monetise the data that flows through the infrastructure. A nation that pays transit fees to foreign cable owners is exporting capital that could otherwise be invested in domestic digital infrastructure. The economic sovereignty score is determined by the proportion of international bandwidth costs that flow to domestic entities versus foreign ones. For most nations, this score is two or lower.
In the cultural domain, the assessment examines whose content dominates the cable’s capacity and whose cultural products reach the nation’s citizens. Cable infrastructure is not culturally neutral. When a cable’s capacity is dominated by traffic from a small number of foreign platforms delivering foreign content, the infrastructure becomes a vector for cultural influence that may not align with domestic cultural policy objectives. A nation that hosts its own content delivery networks and allocates cable capacity to domestic content producers scores higher on cultural sovereignty.
In the intellectual domain, the assessment evaluates the nation’s capacity to understand, maintain, and innovate upon the cable infrastructure it depends on. This includes the availability of domestic engineering talent capable of cable repair and maintenance, the existence of domestic research programmes in optical networking, and the degree of participation in international standards bodies. A nation that must call a foreign company for every cable fault and has no domestic capability to diagnose or repair submarine infrastructure scores a one on intellectual sovereignty, regardless of how much capacity it purchases.
In the technological domain, the assessment focuses on the hardware and software stack that operates the cable infrastructure. The optical amplifiers, the branching units, the network management systems, and the cable-laying vessels themselves are all components of a technological ecosystem that is concentrated in a very small number of suppliers. A nation that cannot manufacture, repair, or substitute any component of its cable infrastructure has a technological sovereignty score of one. Most nations fall into this category. The technology of submarine cables is so specialised and so concentrated that genuine technological sovereignty in this domain is achievable by perhaps five countries globally.
Aggregating these five domains provides a total sovereignty score out of twenty-five. A typical mid-sized nation with no cable ownership, no landing station hosting, no domestic repair capability, and full dependence on foreign transit providers would score between five and eight. This score is not a condemnation of the nation’s policies. It is a measurement of structural reality. The score reveals the gap between the sovereignty a nation assumes it has and the sovereignty it actually possesses in the physical infrastructure domain.
Part Three: Red Flag Checklist
The following eight indicators serve as a diagnostic tool for assessing whether a nation’s physical internet infrastructure position constitutes a sovereignty emergency. Each indicator represents a condition that, on its own, signals vulnerability. When multiple conditions are present, the sovereignty deficit is no longer latent. It is active and escalating.
The first red flag is whether all of a nation’s international submarine cable connections are owned by foreign entities. When not a single cable terminating in a country is owned by a domestic entity, the nation has ceded control of its digital borders entirely. The second red flag is whether the nation hosts zero cable landing stations of its own, instead relying on terrestrial connections to landing stations in neighbouring countries. This creates a single-point-of-failure dependency on a foreign jurisdiction. The third red flag is whether repair and maintenance of submarine cables serving the nation can only be performed by foreign vessels and foreign crews, creating a dependency that becomes visible only when something breaks.
The fourth red flag is whether the nation’s internet exchange points are foreign-owned or foreign-operated, meaning that domestic internet traffic may transit through infrastructure subject to foreign legal compulsion. The fifth red flag is whether the nation has no representation on the governance bodies of any submarine cable consortium serving its territory, meaning that decisions about capacity allocation, pricing, and routing are made without any domestic voice at the table. The sixth red flag is whether the nation’s critical government communications traverse submarine cables owned by entities incorporated in jurisdictions with which the nation has no mutual legal assistance treaty or data protection agreement.
The seventh red flag is whether there exists no domestic regulatory framework requiring cable operators to disclose routing information, capacity allocation, or maintenance schedules to the host government. Without such a framework, the government operates in the dark about the infrastructure on which its entire digital economy depends. The eighth and final red flag is whether the nation has conducted no sovereignty impact assessment of its physical internet infrastructure dependencies in the past five years, meaning that the government itself does not know the scope of its exposure. If three or more of these red flags apply, the sovereignty gap is severe enough to warrant immediate strategic intervention.
Part Four: Phased Implementation Framework
Recovering sovereignty over physical internet infrastructure is not a project that can be completed in a single budget cycle. It requires a sequenced approach that builds capability progressively, starting with the most urgent vulnerabilities and expanding toward comprehensive sovereign control. The following phased framework provides a structured path from assessment to institutionalisation over an eighteen-month timeline.
The assessment phase occupies the first four weeks and focuses on establishing a complete and accurate picture of existing dependencies. This phase requires mapping every submarine cable that terminates in or passes near the nation’s territory, documenting the ownership structure of each cable, cataloguing the legal agreements governing landing rights and transit, and identifying the repair and maintenance arrangements currently in place. The assessment must extend beyond the cables themselves to include the terrestrial infrastructure on which connectivity depends: landing stations, internet exchange points, and domestic backhaul networks. At the conclusion of this phase, the government should possess a single comprehensive document that answers, for every international data path, the question of who owns it, who operates it, and under what legal framework.
The strategic planning phase spans months two and three and translates the dependency map into an actionable sovereignty strategy. This phase involves evaluating options for acquiring ownership stakes in existing cables, identifying opportunities for new cable construction that serves domestic sovereignty objectives, and developing the legal and regulatory frameworks necessary to govern cable infrastructure within the nation’s jurisdiction. The strategy should prioritise interventions that generate the largest sovereignty return for the smallest capital outlay. Acquiring a minority stake in an existing consortium cable can provide governance rights, traffic visibility, and a seat at the decision-making table at a fraction of the cost of building a new cable. Strategic planning also requires building diplomatic relationships with other nations that share similar sovereignty concerns, creating the conditions for multilateral cable projects that distribute costs and risks.
The implementation phase occupies months four through twelve and represents the period of active infrastructure development. This may include participating in new cable construction projects, negotiating capacity purchases with sovereignty-protective terms, developing domestic cable landing stations, and establishing a national internet exchange point under sovereign control. The implementation phase should also include the development of domestic technical capacity for cable maintenance and repair, either through training programmes, partnerships with regional maintenance providers, or investment in cable repair vessel capacity shared among multiple nations. During this phase, the regulatory framework developed in the strategic planning phase moves from design to enactment, establishing clear rules for cable operators regarding transparency, security, and government access.
The institutionalisation phase spans months thirteen through eighteen and ensures that the sovereignty gains achieved in the implementation phase are durable. This phase involves embedding cable infrastructure governance into permanent government institutions, establishing regular sovereignty audits of digital infrastructure dependencies, creating career pathways for the technical personnel needed to sustain sovereign cable operations, and building the diplomatic relationships necessary to participate in international cable governance forums. The institutionalisation phase also includes the development of a long-term investment plan that ensures cable infrastructure sovereignty is maintained and expanded as technology evolves and traffic patterns shift. Without institutionalisation, the sovereignty gains of the implementation phase will erode as personnel turn over, budgets shift, and attention moves to other priorities.
Throughout all four phases, the governance principle is straightforward: sovereignty over physical internet infrastructure is not an all-or-nothing proposition. It is a gradient, and meaningful progress can be made at every point along that gradient. A nation that moves from owning zero percent of its cable capacity to owning twenty percent has not achieved full sovereignty, but it has reduced its vulnerability substantially. It has gained governance rights, traffic visibility, and a platform from which to pursue further sovereignty gains. The phased framework is designed to make that progress achievable, measurable, and self-reinforcing.
The Question Revisited
Who owns the physical infrastructure that carries a nation’s data, and what does it mean for sovereignty when the answer is “someone else”? The TEE Method framework provides the analytical lens through which this question yields a clear answer. The TEE Method posits that sovereignty is determined by three core dimensions: Transparency, which asks whether the sovereign can see and understand the system it depends on; Empowerment, which asks whether the sovereign has the capacity to act on that understanding; and Enforcement, which asks whether the sovereign has the mechanisms to compel compliance with its decisions.
Applied to submarine cable infrastructure, the TEE Method reveals that most nations fail all three tests. They lack transparency into cable routing, ownership structures, and traffic patterns. They lack empowerment in the form of ownership stakes, governance rights, and domestic technical capability. And they lack enforcement mechanisms, operating without regulatory frameworks that give them legal leverage over cable operators. The answer to the question, then, is that when someone else owns the cables, sovereignty is not merely diminished. It is structurally absent at the physical layer, and no amount of cybersecurity spending or data protection legislation can compensate for that absence. Physical infrastructure sovereignty is not one component of digital sovereignty among many. It is the foundation on which all other forms of digital sovereignty rest. Without it, the rest is aspiration built on sand.
This article draws on the TEE Method™ framework from SOVEREIGN: Who Owns the Future? For the complete framework, including the full Seven-Layer Stack Audit methodology and Sovereignty Test Matrix scoring protocols, see tonishatagoe.com.