Versa Networks announced general availability of its sovereign secure access service edge (SASE)-as-a-service, delivered from infrastructure operated entirely within the organization’s legal jurisdiction.

Traditional SASE platforms were largely built for centralized, globally distributed cloud efficiency, not jurisdictional isolation. Most offerings localize inspection or deploy gateways in-country, but often retain centralized control and management functions outside the region.

The new managed model aims to broaden that access. Rather than requiring enterprises to design and staff their own sovereign infrastructure, Versa will deliver the service from in-country data centers under locally governed legal entities. The initial rollout begins in Germany and surrounding region, with contracts executed through Versa Networks B.V., a Netherlands-based legal entity operating under European Union rules.

The company says its Sovereign SASE-as-a-Service launch lands amid mounting regulatory pressure across Europe and other major markets, as regulatory frameworks are tightening requirements around data residency, operational oversight, and cyber resilience. Meanwhile, geopolitical tensions and concerns over extraterritorial data access have turned infrastructure architecture into a strategic risk discussion at the C-suite and board levels.

“Deploying a cloud SASE provider’s appliance on customer premises does not make a solution sovereign,” Versa CEO Kelly Ahuja said in a statement. “True sovereignty requires control over where policy is enforced, where control and management occur, and who controls and governs that data while it is in motion.”

Versa says it has previously delivered sovereign SASE architectures for service providers and regulated sectors such as defense, energy, and financial services. A recent example is Swisscom’s national-scale “Beem” service in Switzerland, built on Versa’s sovereign framework.

Sovereign SASE deployments have been described as a way for organizations to maintain control over their data resources tied to specific regulatory frameworks, and typically involve several components built on top of traditional SASE that allows for more control over data storage, security, and transport.

AI changes the stakes

The timing also reflects a shift in traffic patterns driven by AI.

Large language model (LLM) training pipelines, autonomous agents, and AI-driven workflows are generating more east-west and cross-border traffic across hybrid, cloud, and edge environments. Traditional SASE architectures were optimized primarily for north-south user-to-application flows, often requiring additional controls for lateral inspection.

As AI workloads accelerate data movement in any direction, jurisdictional control over inspection and policy enforcement becomes more complex, and potentially more exposed.

Omdia Principal Analyst Jim Frey called the managed sovereign SASE model “a structural shift,” adding that it lowers the barrier for regulated enterprises that need jurisdictional alignment without needing to shoulder the operational burden of running sovereign infrastructure themselves.