For years, daily life across much of Central Asia ran quietly on Russian-built rails. Ride-hailing, maps, email, search and food delivery in cities from Almaty to Tashkent leaned heavily on Yandex, the Russian technology group whose services were often better localised than anything built at home. That dependence became impossible to ignore when Ukrainian strikes on Yandex infrastructure sent disruptions rippling far beyond Russia’s borders, stalling apps and services in countries that are not parties to the war at all.
The outages lasted hours, not weeks. But for policymakers in the region, the episode crystallised a question that had been building for a decade: what does digital sovereignty actually mean for a small or mid-sized state whose citizens’ data, payments and movements flow through platforms headquartered in another country — especially one at war? The answer now shaping policy is less about blocking foreign services and more about building credible domestic alternatives and keeping critical data under domestic law.
A dependence built on convenience
None of this happened by conspiracy. Yandex succeeded in Central Asia the straightforward way: it invested early, hired locally, supported Kazakh, Uzbek and Russian languages properly, and priced for the market. Domestic rivals were thin on the ground, and American or Chinese platforms often treated the region as an afterthought. Over time, though, convenience hardened into infrastructure. Taxi fleets, small businesses and even public-facing services came to assume that a foreign platform would simply always be there.
That assumption is what the strikes broke. When a service used for navigation, logistics and payments can be degraded by a missile strike in another country, finance ministries and security councils start asking different questions. Where is citizens’ data physically stored? Which jurisdiction can compel access to it? And how quickly could essential services keep running if the foreign provider went dark for a week rather than an afternoon? Readers following our explainer coverage will recognise the same questions now being asked about cloud providers and payment networks worldwide.
What sovereignty means in practice
In practice, Central Asian digital sovereignty is taking a pragmatic rather than theatrical form. Governments are expanding data-localisation rules that require certain categories of personal and financial data to be stored on servers inside the country. They are funding national data centres, encouraging state agencies to migrate onto domestic or regionally hosted clouds, and writing procurement rules that favour local suppliers for sensitive systems. Reporting by The Diplomat on the strikes and their regional fallout describes officials framing the shift as resilience planning, not decoupling.
Just as important is what governments are not doing. No Central Asian state has announced a ban on Yandex, and none is likely to: the services are popular, embedded and, for now, better than the alternatives. The strategy instead resembles insurance. Build the domestic data centre before you need it. Pass the localisation law before a crisis forces the issue. Nurture local platforms so that, if a foreign service falters, daily life bends rather than breaks.
The hard parts come next
Insurance, however, is expensive, and sovereignty has costs that press releases rarely mention. Local data centres need reliable power, cooling, security and — scarcest of all — experienced engineers, many of whom currently work for the very foreign platforms governments are trying to hedge against. Data-localisation can also raise prices for local businesses, fragment services across borders, and hand domestic authorities tools that civil-society groups worry could be turned toward surveillance of their own citizens.
Those tensions are real, and they will decide whether the sovereignty push produces resilient digital economies or merely more controlled ones. For now, the direction of travel is unmistakable. Central Asia’s governments watched a war they are not fighting interrupt the apps their citizens use every day, and they concluded that dependence itself is the vulnerability. Whether the region can build its way out of that dependence — without losing the openness that made its tech scene grow — is the story to watch over the next five years. Return to our homepage for continuing coverage of the region’s changing internet.
