nLighten and Arqit Test a Sovereign Key Model for Public Cloud Workloads

On July 14, 2026, nLighten, a European edge data centre operator with more than 30 facilities in seven countries, and Arqit Quantum Inc. announced a proof of concept in which workloads ran in an unnamed major hyperscaler's public cloud while customer data and the cryptographic controls stayed anchored in nLighten's Geneva data centre. The announcement names Arqit's SKA-Platform and NetworkSecure, with Intel Trust Domain Extensions providing confidential computing so keys were generated and used inside a protected enclave. The companies present it as a model for using public cloud without giving up sovereignty over keys and data.

Provenance: this is a public announcement by the companies named. It describes a proof of concept, not a commercial deployment, a customer contract or a Fabric Networks engagement. Fabric Networks was not involved. We record it here because the platform demonstrated is the one Fabric licenses and operates in Canada.

What it does and does not show

It shows a working pattern: keys held in a sovereign facility, workloads in hyperscale cloud, and the trust boundary enforced by confidential computing rather than by contract. It does not show a customer, a commercial service or a Canadian instance. The hyperscaler is not named and no timeline is given.

Our take

This is the architecture Canadian public sector and regulated buyers keep asking for and keep being told is impractical: use the hyperscalers, keep the keys at home. The Geneva proof of concept is the closest public test of that pattern on the platform Fabric operates. In Canada the same design would anchor keys and controls in Canadian colocation, run the private instance under Fabric's operation, and put the workloads wherever the business needs them. Fabric Networks has not built this for a customer yet and says so. What we can do today is inventory the keys, tunnels and cloud connections an organization already depends on, and design the sovereign key path from there. If your organization is weighing cloud adoption against data residency, that inventory is the first deliverable.