The question of who can confidently tell the board of directors where data is located was raised at the Cloud On Demand and Microsoft business breakfast at Bryanston Country Club on September 17, 2026. This issue revealed a significant gap: organizational leaders, from banks to NGOs, acknowledged the importance of data but were uncertain about its exact location.
The discussion covered topics such as authorization, unauthorized access, and fraud, before returning to cloud technologies and management responsibility. Othelo Vieira, a technical product manager at Cloud On Demand, emphasized the need for trusted partners, security, capabilities, and bandwidth. He noted that the provider's responsibility must align with the responsibility within the business itself.
A hypothetical 15% weakening of the rand intensified the economic aspects: the question arose of how the deficit in cloud service budgets would be affected, and whether the implemented technology provided sufficient value and efficiency. Participants explored the possibility of using smarter contracts, service level agreements, and prioritizing frequently used, or 'hot,' data over information required only occasionally. These solutions demanded a deep understanding of one's own data from clients.
Compliance issues related to the European General Data Protection Regulation (GDPR) and South Africa's Protection of Personal Information Act drew attention to specific evidence. Provider certificates can offer guarantees, but organizational behavior must withstand scrutiny from the board of directors or a regulator. A company's readiness is shaped by management sponsorship, backup, data quality, and integrated systems.
Challenges Related to Artificial Intelligence and the Public Sector
Artificial intelligence raised questions about localization and model selection, while the public sector's contribution highlighted uncertainty regarding sovereign citizen data and national recommendations. The exchange of views demonstrated the role of Cloud On Demand and Microsoft in linking cloud capabilities with business decision-making. Three key questions reflected the practical complexity of the situation:
Do we control our data? Partially. Control begins with capture, quality, and classification, whereas placement and jurisdiction may be limited by external factors.
Can we prove it? Systems and audit trails usually provide evidence, but organizations are not always prepared to provide it.
Can we predict the cost? Contracts and currency risk hedging help, but rapid changes in market, technology, and regulation make perfect forecasting impossible.
It is recommended to secure what can be foreseen while maintaining flexibility. Preparation allows for courses of action. The goal is not to achieve perfect control, proof, or predictability, but to possess sufficient knowledge of the data, architecture, obligations, and economics to make informed decisions before circumstances do it for you.