Ukraine and Panama have signed a digital-transformation cooperation agreement under which Kyiv will export the expertise behind Diia — its 'state in a smartphone' platform — to help Panama modernize public services and fight corruption. According to Ukraine's Ministry of Digital Transformation, the cooperation spans e-government, digital identity, cybersecurity, fintech, maritime-sector digitization, smart-port infrastructure, digital trade corridors, and the country's new Diia.AI agentic assistant (Biometric Update; Think Digital Partners).
The symbolism is hard to miss. A country fighting a full-scale invasion is selling competence in the one domain where it has become a global benchmark, to a country that controls one of the world's most important shipping chokepoints.
What Ukraine Is Actually Offering
Diia is not a pilot. As of October 2025, Ukraine's Ministry of Digital Transformation reported over 23 million users — the large majority of the country's adult population — with 70+ digital public services and 33 digital documents available through the app (Diia Reaches 23 Million Users, Digital State). The platform kept passports, business registration, tax filing and benefits payments running through blackouts, displacement and occupation — a stress test no peacetime e-government system has faced.
The headline addition is Diia.AI, launched in September 2025 and recognised at the WINWIN Summit 2025 as the world's first national AI agent that does not merely consult citizens but delivers government services (Diia.AI, Digital State). Built on Google's Gemini 2.0 Flash and the LangGraph orchestration framework, it runs a hybrid architecture: a cloud model handles language, while state-registry data stays inside Diia's on-premise security perimeter, shielded from the cloud (Interoperable Europe Portal, European Commission). Early metrics cited by the EU portal include a customer-satisfaction score above 80% and a projected saving of more than one million citizen-hours a year.
For Panama — which governs the Panama Canal and one of the world's largest ship registries — the maritime and smart-port components are the real prize. Ukraine is offering electronic maritime certificates, digital trade corridors and port-logistics digitization on top of the consumer-facing ID layer.
Steelmanning the Skeptics
There is a serious case for caution, and it deserves to be stated plainly. Concentrating a nation's identity, documents and service-delivery into a single app creates a single point of catastrophic failure — for outages, for breaches, and for abuse. A future government with an illiberal turn inherits a ready-made surveillance and exclusion machine: the same rails that issue a driving licence can revoke one, throttle a dissident's access, or quietly log behaviour. Privacy advocates have long warned that centralized digital ID, once built, is almost never dismantled, and that the convenience is the bait. Layering an autonomous AI agent on top — one that takes actions rather than answering questions — multiplies the blast radius of any error or compromise. For Panama, importing a foreign-architected stack also raises legitimate questions about vendor lock-in and data sovereignty.
These are real risks, not rhetorical ones. The right response is not to reject digital statecraft but to demand it be built proportionately.
Why the Deal Still Makes Sense
The corruption argument cuts decisively in favour. Panama's public-service modernization is explicitly framed around transparency and anti-corruption, and Ukraine's pitch is built on exactly that: "convenient, transparent, and anti-corruption digital services," in the ministry's words. Digitizing a permit or a customs clearance removes the discretionary human gatekeeper who is the natural habitat of a bribe. In low-trust, high-friction bureaucracies — where the alternative to a digital state is not a privacy utopia but a clerk demanding cash — the proportionate-regulation calculus favours building the rails, then governing them well.
Diia's architecture also answers some of the strongest objections on its own terms. The decision to keep registry data on-premise and out of the cloud model is a deliberate data-minimization choice, not an afterthought. Critically, the underlying Diia.Engine is being released as an open-source platform that other states can self-host — meaning Panama need not surrender control to a black-box foreign vendor. That is the difference between exporting software you must rent and exporting a method you can own.
The deeper signal here is about what counts as strategic industrial capacity in 2026. Estonia exported X-Road; India exported the open-source India Stack; Ukraine is now exporting Diia. Govtech has become a tradable asset class, and the open, self-hostable variant is winning partners precisely because it doesn't replicate the dependency it claims to cure.
The Verdict
The Diia-Panama agreement is a model worth watching — and broadly worth backing. The safeguards that matter are governance, not abstinence: enforceable data-protection law, independent oversight of the AI agent's authority to act, an audit trail citizens can inspect, and a genuine offline fallback so that no one is excluded when the system fails. Build those in, and a wartime survival tool becomes a credible blueprint for cleaner, faster, more accountable government far beyond Kyiv.