A Groundbreaking With Two Audiences
On July 22, 2026, Transport and Infrastructure Minister Abdulkadir Uraloğlu broke ground on Türksat's Gölbaşı data center outside Ankara, calling it Türkiye's "new digital fortress" and declaring that the project would "establish sovereignty over our data on our own soil" (Daily Sabah). The facility — 35,300 square meters, six system halls, 33 megavolt-amperes of installed power, built to LEED Gold and Uptime Institute Tier-III standards — is designed to triple Türksat's existing data center capacity in its first phase and expand it more than eightfold by the second, with operations targeted for early 2028 (Türksat). Uraloğlu also floated a second ambition: positioning the state-owned facility as a regional hub, offering secure hosting to "neighboring countries and Turkic republics."
Strip away the fortress rhetoric and the project is best understood as physical infrastructure for a rule that has existed since 2019: Presidential Circular No. 2019/12 on Information and Communication Security, which bars public institutions from storing data in third-party cloud services and requires it to sit on systems the institution itself controls, hosted domestically. Gölbaşı is Türksat — majority-owned by Turkey's sovereign wealth fund — building the state capacity to actually comply with that mandate at scale, for e-Devlet (Turkey's e-government portal) and the AI workloads (machine learning, model training, high-performance computing) the government now wants to run on sovereign hardware.
The Case the Government Isn't Wrong About
The steelman here deserves a fair hearing. Governments handling citizen identity data, tax records, and health systems have a legitimate interest in knowing exactly which jurisdiction's courts, subpoenas, and outage risk govern that infrastructure. A country that outsources its e-government backbone to a foreign hyperscaler is exposed if that provider changes terms, gets sanctioned, or gets subpoenaed by a third government under laws like the US CLOUD Act. Turkey's KVKK (Personal Data Protection Law, No. 6698) already requires case-by-case justification for cross-border transfers — via adequacy decisions, standard contracts, or binding corporate rules, none of which yet cover a general adequacy finding for any country as of 2026 (KVKK). Building domestic capacity so government data never has to leave in the first place is a coherent, defensible response to that legal reality — not a paranoid one.
Where the Fortress Framing Breaks Down
But "sovereignty" is doing more rhetorical work here than the facility can bear, and the contrast with what's happening a few hundred kilometers away in the private sector is instructive. In November 2025, Turkcell and Google Cloud announced a combined $3 billion investment — $2 billion from Google over ten years, $1 billion from Turkcell — to build Turkey's first hyperscale Google Cloud region, joining a network of 42 such regions worldwide and projected to generate over $5 billion in annual economic value once live (Presidency Investment Office). Turkey's own Vice President, Cevdet Yılmaz, described that deal — a foreign hyperscaler landing physical infrastructure inside Turkish borders — as something that "strengthens Türkiye's digital sovereignty." The government is simultaneously funding a state monopoly and celebrating private foreign capital, under the same sovereignty banner, without reconciling what the word means in each case.
That matters because a state-run "fortress" restricted by circular to public-institution use doesn't compete with or discipline the private cloud market — it sits beside it, funded off-budget through Türksat rather than tested against commercial cloud pricing or service-level competition. Public money building bespoke infrastructure for a legal requirement (keep e-Devlet data in-country) is a narrower, more defensible ask than building a national AI compute champion that also happens to want to export hosting services to neighboring states. The latter ambition, voiced by the minister at groundbreaking but absent from Türksat's own project materials, risks scope creep from a compliance investment into a subsidized regional cloud competitor — one that would compete directly against the Google-backed hyperscale region Ankara is simultaneously courting.
The Actual Test
The real accountability question isn't whether Turkey should control its own e-government data — a defensible, achievable goal — but whether Gölbaşı stays scoped to that mandate. If the facility's public-sector traffic is priced and audited transparently, and its hypothetical regional-hub role is opened to competitive tender rather than folded quietly into Türksat's state remit, the fortress framing is marketing on top of ordinary compliance infrastructure. If instead it becomes the default government cloud vendor immune from the Turkcell-Google-style competitive dynamic reshaping the rest of the market, Turkey will have built a monument to sovereignty that mainly insulates one state company from the private investment its own government is otherwise trying to attract.