admin 
du said its National Hypercloud has received certification and endorsement from the UAE Cybersecurity Council, a step the company described as making it the first compliant, secure and sovereign cloud infrastructure approved for deployment across both public and private sectors in the UAE. The announcement places the telecom group at the centre of a fast-moving contest over where sensitive data is stored, who controls the infrastructure, and how far cloud adoption can expand in government and highly regulated industries without breaching national security and residency requirements.
The certification matters because it goes beyond a routine product launch. du and the council framed it as an endorsement tied to national security standards for data residency and protection, two issues that have long complicated cloud migration for ministries, critical infrastructure operators, healthcare organisations and financial institutions. In practical terms, the move gives du a stronger case when pitching organisations that want public-cloud scale and AI capability but are wary of placing core workloads on platforms they do not see as sufficiently local, sovereign or policy-aligned.
National Hypercloud is not a brand-new concept. du formally launched the platform in July 2025 as a sovereign cloud service for government entities and large organisations, saying at the time that it was the country’s first local hyperscale cloud offering of its kind. The platform is built in partnership with Oracle and uses Oracle Alloy to let du operate cloud services from UAE-based facilities under its own control. Oracle said the arrangement gives customers access to more than 200 OCI services, including AI tools, while allowing du to manage operations, security and localisation requirements more directly.
That combination of local operation and global technology is central to du’s pitch. Sovereign cloud products have become a strategic category across the Gulf as governments try to balance innovation with tighter oversight of data, cyber risk and digital infrastructure. For the UAE, which has pushed hard to position itself as a regional technology and AI hub, trusted domestic cloud capacity is increasingly tied to broader economic policy. Industry material linked to the market points to strong growth in public cloud and AI spending, while data-centre investment has also accelerated as demand rises for compute, storage and regulated digital services.
The timing also reflects a harder security environment. In February, authorities said the UAE had foiled organised cyber attacks targeting digital infrastructure and vital sectors, with officials warning of a qualitative shift in the methods being used. That backdrop sharpens the commercial and policy value of any certification tied to sovereign infrastructure. Buyers in energy, telecoms, finance and the public sector are no longer looking only at performance and cost; they are weighing resilience, compliance and political control over data flows with far greater urgency than before.
Still, the certification should be read carefully. The claims that du’s platform is the first approved infrastructure of its kind in the UAE come from the company and from reports based on its announcement, rather than from a publicly detailed council framework spelling out how rivals were assessed. That does not invalidate the endorsement, but it does mean the market will watch for further clarity on the certification standard, the audit process behind it, and whether similar approvals are extended to other local or international operators serving the country.
Competition is unlikely to stand still. The UAE already hosts major digital infrastructure plans, including du’s own agreement announced last year for a hyperscale data centre with Microsoft as the main tenant. Other telecom and cloud players are also building sovereign, AI-focused or heavily localised offerings across the region. That suggests du’s advantage from this certification may lie less in exclusivity over the long term and more in first-mover credibility at a time when boards and public agencies are under pressure to modernise systems without creating regulatory or geopolitical vulnerabilities.
