IBM report finds UK AI ambitions outpacing digital control

A new report from IBM suggests that UK artificial intelligence ambitions could be outpacing the country's digital control, creating a widening gap between AI adoption and operational readiness. Fewer than one in three UK respondents, 32%, can provide the strongest evidence that their governance works under pressure.

UK boards are now shaping digital sovereignty strategies, and the question has shifted from whether digital control matters to whether organisations can prove it. Regulators, customers and investors are pressing businesses to show greater control and accountability over their technology environments. Digital sovereignty has become a matter of business performance and board-level responsibility. The Government has also stressed control, sovereignty and interoperability.

The IBM Digital Sovereignty Index measures how well organisations can evidence control across four pillars: AI, technology, operations and data. It applies six dimensions of control: responsibility, traceability, constraint, intervention, exit and legitimacy. Leading organisations typically keep a complete audit trail of AI-supported decisions, test controls routinely with independent review, and hold exit plans that have been tested or used in practice.

The index draws on a survey of 2,003 senior decision-makers at large enterprises across seven countries, including 250 UK respondents at organisations with 500 or more employees. IBM worked with Edelman Intelligence on the index, with fieldwork conducted between 17 July and 11 August 2026. The UK scores 77 out of 100, above the global average of 74, while AI is its weakest pillar at 70.

“For business leaders shaping their digital sovereignty strategies, the focus must be on stronger evidence,” said Leon Butler, Chief Executive, IBM UK and Ireland. “Real digital sovereignty means having the freedom to adapt, respond and change course without losing control. Organisations across the UK should focus on building sovereign-by-design strategies that embed openness, interoperability and flexibility from the outset. That way they can demonstrate resilience and accountability, even when under pressure.”

“As organisations embed AI more deeply into their operations, data sovereignty must be more than a matter of confidence,” said Debbie Lawrence, Group Head of Data Strategy and Management at LSEG. “Organisations need to be able to demonstrate where their data comes from, how it can be used, and what controls are in place. Trusted, well-governed data from established providers enables businesses to continue innovating securely and responsibly.”