Sri Lanka is moving toward a hybrid sovereign cloud model for sensitive government and financial data, while Mauritius has launched a 2026-2030 National Fintech Strategy. One is trying to keep control over the rails. The other is trying to make those rails faster, cleaner, and more useful.
- Sri Lanka: hybrid sovereign cloud plans for sensitive public data.
- Mauritius: a formal 2026-2030 fintech roadmap with six pillars.
- Common thread: data control, regulation, infrastructure, and skills.
- Reality check: launch speeches are easy; implementation is where the pain starts.
In Colombo on June 17, the GROUNDED: Local Data Sovereignty Cloud Summit put Sri Lanka’s cloud direction on the table. Deputy Minister of Digital Economy Eranga Weeraratne said the government is shifting toward a hybrid and sovereign cloud framework so highly sensitive financial and government data stays within “local, legally bound boundaries.”
That is the heart of data sovereignty: data is governed by the laws of the country where it is stored or processed. In practice, Sri Lanka wants the scale and convenience of cloud computing without handing its most sensitive systems to a legal black box abroad.
The country’s digital public infrastructure includes a national digital ID and a real-time payments system, both of which depend on trust. If those rails are weak, people notice fast. If they are secure and reliable, most people never think about them, which is exactly the point.
ICTA, Sri Lanka’s Information and Communication Technology Agency, is leading public consultation on the Cloud Policy and Strategy, and draft documents have been released for stakeholder feedback. That matters. Cloud policy is not just a tech issue; it touches law, procurement, security, sovereignty, and who gets to access what when things go sideways.
The reference to AWS in the summit coverage is worth noting, but carefully. Amazon Web Services was part of the discussion, and Mayank Arora, Head of AWS Public Sector for India and Sri Lanka, attended the summit. That does not automatically mean a finalized technical deployment or a signed-off architecture. It does, though, show that Sri Lanka is trying to square a difficult circle: using major cloud capabilities while keeping local control over sensitive data.
That tension is familiar across emerging markets. Governments want resilience, scale, and modern infrastructure, but they also want to avoid dependency and outside reach. Sovereign cloud is the compromise many are reaching for. Whether it becomes a clean technical model or a bureaucratic headache depends on the rules, the architecture, and whether the state can keep the lawyers, vendors, and procurement teams from turning the whole thing into a mess.
Weeraratne also pointed to possible local AI efforts, including “Sovereign AI” and the “NCINGA AI Factory”. The broader idea is simple. Countries do not just want to store data anymore. They want to control how it is used, trained on, and turned into economic value. That is the real fight now. The server rack is just the beginning.
Mauritius is taking a more formal route. The government has launched its 2026-2030 National Fintech Strategy, developed by the Ministry of Financial Services and Economic Planning with technical support from the UN Economic Commission for Africa (ECA), the Mauritius Africa Fintech Hub, and other stakeholders.
The strategy is built around six pillars:
- regulatory framework and innovation
- digital infrastructure and cybersecurity
- talent and skills development
- innovation and market growth
- international collaboration and positioning
- financial inclusion with consumer protection
That is a sensible mix. Fintech needs more than hype and apps with glossy logos. It needs licensing rules that do not drag on forever, infrastructure that does not buckle, cybersecurity that is not treated like an afterthought, and consumer protection that actually means something when the scammers show up.
Jyoti Jeetun, Mauritius’s Financial Services and Economic Planning Minister, said finance is one of the country’s strongest levers for economic democratization. In plain English, that means more people and businesses should be able to access accounts, payments, credit, and digital services without absurd friction or endless gatekeeping.
Eunice Kamwendo, speaking on behalf of ECA Executive Secretary Claver Gatete, described the launch as a powerful demonstration of how African countries can shape their own digital finance futures, anchored in innovation, inclusion, and sound governance. That point lands. Too often, digital finance policy gets imported, overpackaged, and poorly adapted. Local problems rarely fit generic slide decks.
“The government is shifting towards a hybrid and sovereign cloud framework to keep highly sensitive financial and government data within local, legally bound boundaries, ”, Eranga Weeraratne
“The launch of the Mauritius National Fintech Strategy 2026-2030 is a powerful demonstration of how African countries can shape their own digital finance futures, anchored in innovation, inclusion and sound governance, ”, Eunice Kamwendo
“The Mauritius National Fintech Strategy demonstrates how African countries can harness innovation, digital technologies and strong institutions to build resilient and inclusive financial ecosystems. By investing in regulatory innovation, digital infrastructure and human capital, Mauritius is creating an enabling environment that will attract investment, expand financial inclusion and strengthen regional competitiveness, ”, Mactar Seck
The implementation details for Mauritius are the most concrete part of the picture. The strategy is to be led by the National Fintech Governance Council and will run from this year through 2030. Key targets include reducing licensing turnaround times, broadening unified digital onboarding, developing specialized fintech skills for over 5, 000 individuals yearly, and strengthening Mauritius’ digital infrastructure.
“Unified digital onboarding” is one of those phrases that can mean several things depending on who is speaking. In practice, it usually points to a streamlined digital process for verifying and registering users across services, often tied to identity, compliance, and account opening. If done well, it can make onboarding faster and less painful. If done badly, it becomes another bureaucratic pile of half-integrated systems and confusion.
The training target is also notable. A skills pipeline of that size suggests Mauritius understands a basic truth: fintech does not run on optimism. It runs on engineers, compliance specialists, cybersecurity staff, product teams, and regulators who know what they are looking at.
The broader ambition is to make Mauritius a stronger regional fintech hub and improve its competitive position. That is a realistic ambition for a country that has long leaned on financial services as part of its economic model. The useful part here is that the strategy is not pretending fintech is a magic wand. It treats the sector as infrastructure-plus-policy: regulation, infrastructure, people, and inclusion all in the same frame.
There is also a useful contrast between the two countries. Sri Lanka is trying to define where sensitive data lives and who can govern it. Mauritius is trying to define how digital finance should grow without turning into a regulatory free-for-all. One is about guarding the vault. The other is about building a better bank around it.
Both approaches point to the same bigger shift: digital finance is no longer a side project. It is statecraft. Countries that control their data rails control who can build on top of them, who gets access, and how much resilience the system has when pressure hits.
Key questions and takeaways
-
What is Sri Lanka trying to do with its cloud policy?
Sri Lanka is moving toward a hybrid sovereign cloud model so sensitive government and financial data remains under local legal control. That gives the state more oversight, but it also creates tradeoffs around cost, flexibility, and vendor dependence. -
Why does data sovereignty matter?
Data sovereignty means data is governed by the laws of the country where it is stored or processed. For public systems like digital ID and payments, that can improve trust, security, and national control. -
Is AWS replacing Sri Lanka’s sovereignty goals?
Not necessarily. A government can use a major cloud provider and still keep policy control over sensitive data, but the legal and technical boundaries have to be real. A cloud logo is not a sovereignty strategy. -
What is Mauritius trying to achieve with its fintech strategy?
Mauritius wants to strengthen its fintech ecosystem through better regulation, cybersecurity, infrastructure, skills, innovation, and consumer protection. The goal is growth without turning the sector into a scam magnet. -
How will Mauritius judge success?
The strategy points to faster licensing, stronger digital onboarding, better infrastructure, and more trained professionals. Success will depend on whether those changes show up in practice, not just in speeches and launch-day applause. -
What is the common thread between Sri Lanka and Mauritius?
Both governments are treating digital finance as national strategy, not just tech policy. Sri Lanka is focusing on control and trust, while Mauritius is focusing on structure and execution.
Further reading
A few useful cross-checks and related angles worth keeping in mind:
