← All notes

A border is not an ACL

· re: Cloudera Powers the Agentic AI Era with Cloudera Anywhere Cloud (Cloudera)

Cloudera launched Anywhere Cloud this week: run AI “directly against their proprietary data estates without moving sensitive assets”, across clouds and private data centres, “without moving or copying any data”. Good. The repatriation turn I wrote about in the cloud-to-AI parallel is now the industry’s own pitch: move the workload to the data instead of shipping the data out.

But locality answers where, not who. Keeping data inside a jurisdiction stops it crossing a border; it says nothing about what an agent may read once it is standing next to it. (The breach you actually care about is an over-permissioned read, and that happens entirely onshore.)

My read: sovereignty pitches are about to be everywhere, and the test to apply is the same every time. Once the AI is running against your estate, is it held to the clearance of the person it acts for, with a log you can hand an auditor? A border is not an ACL. Where the data sits is the start of governance, not the end of it.