As regulations tighten and cloud dependence deepens, digital sovereignty has become an issue for boards, not just IT teams.