Not a Jellyfish

The Portuguese man-of-war is not a jellyfish. It is a siphonophore: a colony of specialized organisms so deeply interdependent that none can survive alone. Biologists spent decades arguing over whether to classify it as one creature or many, and eventually settled on a category-defying answer: it is both. What makes the man-of-war remarkable is not its sting but its architecture. Damage one cluster of polyps and the colony compensates. Sever a tentacle and it reconfigures. The man-of-war does not survive by retreating into a shell. It survives by distributing its vital functions across a network where the boundary between “self” and “ally” dissolves entirely.

Now hold that image.

In 2017, on the rooftop terrace of the CRIM in Montreal, I recorded a video called Les réseaux gagnent toujours — networks always win. I was building 2PS at the time, a platform connecting independent consultants across twenty countries, and I had spent years immersed in Barabási’s work on scale-free networks. When Barabási mapped the World Wide Web in 1999, he expected a normal distribution, a neat bell curve of connections. What he found instead was a power law: most nodes had very few links, while a handful of hubs concentrated a massive share of the network’s connectivity. The same mathematical signature appeared in Hollywood collaborations, airline routes, protein interactions, the spread of ideas. In that video, I used the analogy of the human body: you can lose thousands of cells and survive, but target a hub like the heart and the system collapses. Networks always win. That was not a marketing slogan. It was the design principle behind everything I built.

This conviction did not come from data science alone. It came from two decades practising open innovation, which is the philosophical backbone of modern innovation management. The premise of open innovation is simple and, to anyone who has lived it, self-evident: the boundaries of an organization are not the boundaries of its intelligence. The best ideas, the strongest partnerships, the most resilient architectures all depend on controlled porosity, on the willingness to let value flow across borders rather than hoarding it behind walls. Sovereignty, in the sense of keeping everything internal and refusing to share, has never been how innovation actually works. It is how innovation dies.

Which is why I have always been uneasy with data sovereignty in its current implementation. Not with the principle, which is sound. Having critical data inside your country is obviously a good thing, a matter of legitimate jurisdictional authority and citizen protection. But the way many countries have implemented it treats data as though it were a physical object that leaves one place when it arrives in another. Data is fungible. Replicating it somewhere else does not diminish it at home. The entire architecture of the modern internet understood this decades ago: Content Delivery Networks distribute copies of the same data across dozens of countries precisely because redundancy makes the system more resilient, not less sovereign. CDNs did not destroy the internet’s integrity. They made it indestructible. Data sovereignty regulations, in their current rigidity, have ignored this precedent entirely.

When a missile strike hit a data centre in the UAE, the physical vulnerability of sovereign data stopped being a policy debate and became a crater in the ground. And what the UAE government did next confirmed what I had been arguing for nearly a decade: they created emergency legal exceptions to migrate sovereign data to Germany. Not to a backup facility down the road. To another country, another jurisdiction, another legal system. In the time it takes to file an incident report, decades of “my house, my rules” data philosophy were overridden by the most ancient of strategic instincts: when your house is on fire, you send your children to the neighbour you trust.

The man-of-war distributes function where function can survive. The UAE, in crisis, discovered what the siphonophore has known for 500 million years, what Barabási formalised in 1999, and what open innovation has taught practitioners for twenty years: sovereignty is not a wall. It is a network. Networks always win, at whatever scale you look at them.

A Name for What Happened

What the UAE built with Germany was not a backup plan. It was the prototype of something I would call a Digital Ally: a pre-negotiated relationship in which legal interoperability, infrastructure mirroring, and mutual trust are established before the crisis, not after. The difference between buying fire insurance while your house is burning versus while the sun is shining.

The relationship implies legal interoperability through pre-negotiated “break glass” protocols for instant cross-border data migration, infrastructure mirroring with warm standby environments capable of ingesting country-level data loads, and most consequentially, the end of digital neutrality. Just as nations formalise military alliances through treaties, they must now choose digital allies. You cannot wait for the first strike to decide who you trust with your central bank’s ledger.

Asimov understood this. If you didn’t have the chance to read his books, Foundation, watch the series on AppleTV. The Foundation’s entire premise was that Hari Seldon recognized the Empire would fall and that survival depended on distributing civilization’s knowledge across geographically separated vaults. Seldon did not build a bigger wall around Trantor. He placed the knowledge where the collapse could not reach it.

What This Changes

If you are building a fintech platform or a health-tech AI today, the compliance question “Is my data stored in Dubai?” is necessary but no longer sufficient. You must now also ask: if Dubai goes dark, where does my innovation live next, and does that destination have a compatible regulatory framework to keep my service legal from foreign soil?

And here is where the logic gets uncomfortable, which is usually where it gets interesting. If Germany is trusted enough to hold the UAE’s sovereign data during conflict, the justification for strict segregation during peacetime begins to erode. Not collapse overnight, but erode, in the way coastlines erode: slowly, then suddenly, then irreversibly. Data sovereignty alone is not complete without the concept of Digital Allies. I believe we will see Digital Schengen Zones, blocs of countries where data sovereignty is shared under a common framework, creating unified innovation environments that are resilient by design rather than by geography.

The Lesson

The UAE incident was an empirical demonstration of a principle that biology has validated over hundreds of millions of years, that Barabási formalized mathematically, and that open innovation has been practiced in boardrooms and labs for two decades: centralized systems fail under stress; distributed trust survives.

If you are a CTO or policymaker reading this, here is what you can do Monday morning. Identify the three nations whose legal frameworks are most compatible with yours. Run a tabletop exercise: your primary data centre is offline for 72 hours from a kinetic event, not a power failure. Where does your data go, under what legal authority, and how long does the migration take? If the answer is “we have not planned for this,” you have your first project.

Stop asking “where does my data live?” and start asking “where does my data survive?” The answer to that question is the name of your Digital Ally. And if you do not have one yet, the man-of-war would like a word.

How Innovation-Ready Is Your Organization?

Take the free Innovation Maturity Diagnostic — a 3-minute self-assessment based on 30 years of field research across 50+ countries.

Take the Diagnostic →