3i Infotech, an Indian information technology company, has launched NuRe 3i+, a cloud platform it builds with Oracle and describes as Malaysia's first zero-trust sovereign cloud. The company says the offering is aimed at organisations that must keep data within the country's borders to satisfy data-residency rules, and that it combines infrastructure and platform services with an access model in which every request is verified rather than trusted by default.

The pitch rests on a regional observation: that in much of Asia-Pacific there are no hyperscale cloud providers, which forces enterprises to host data abroad if they want cloud economics at all. 3i Infotech says the platform keeps data and operations sovereign, supports Oracle workloads such as its database and business applications, and is meant for regulated sectors including banking, government, healthcare and media. It also says the effort is tied to training local staff through centres in Malaysia.

Why 'sovereign' is a claim to read closely

Sovereignty in cloud is only partly a technical property. Keeping data physically inside a country is a design choice; keeping it beyond the legal reach of foreign authorities is a matter of ownership, jurisdiction and who can be compelled to hand it over. A platform operated by one company on another company's technology can be genuinely local in where the servers sit and still depend on foreign suppliers for support and updates.

The announcement does not provide an audit, a certification or a customer against which any of this can be tested, and 'first' in a market where others have made similar claims is a marketing position rather than a fact checkable from outside. The underlying need is real: plenty of organisations in the region do face residency rules they cannot meet with a global cloud region far away. What would make the claim persuasive is an independent assessment of the controls and a named regulated customer willing to say what it moved — neither of which is here.