Abstract

A comparison of Estonia and Rwanda offers a test of a central proposition of emergent sovereignty theory: a state’s digital power depends not on the quantity of technologies as such, but on the configuration of its technological, political, informational, and cognitive resources. The two countries’ aggregate profiles are nearly equal—389 points for Estonia and 377.7 for Rwanda, a difference of just 11.3 points—yet their internal configurations differ radically. Estonia leads Rwanda by 31.8 points in the technological dimension, whereas Rwanda scores higher in the political, informational, cultural, and military dimensions.

The central finding is that digitalization in Estonia generates autonomous capacity to a greater extent: an open, distributed architecture, advanced cyber resilience, redundancy for government data, and participation in shaping international cyber norms create alternatives and increase reversibility. Rwanda effectively converts digital projects into greater administrative reach and faster service delivery, but some of these gains are accompanied by platform concentration, external financing, infrastructure contracts, and diminished informational autonomy for society. Thus, equivalent gains in digital efficiency can produce different forms of sovereign agency.

Research Puzzle

Digitalization has a dual character. It enables small states to offset limitations in territory, population, capital, and administrative personnel: digital identification, interoperable registries, and remote services reduce transaction costs and extend the reach of public authority. At the same time, the digital state becomes dependent on telecommunications networks, cloud services, software, hardware components, external financing, standards, and specialized personnel.

This raises the central research question: when does digitalization expand the range of strategic choices faster than it creates dependencies that cannot readily be replaced? Answering it requires distinguishing digital maturity from digital sovereignty. The availability of electronic services measures the functions delivered, but does not establish who controls the underlying infrastructure, whether providers can be replaced, whether the system can withstand a crisis, or whether society retains the ability to challenge government decisions made through digital systems.

Estonia and Rwanda are suitable cases for three reasons. First, both have used digital transformation to overcome constraints of scale. Second, both have developed centrally coordinated digital strategies, but operate within different institutional regimes. Third, their nearly identical aggregate scores conceal sharply divergent interactions across dimensions, allowing us to distinguish the arithmetic sum of resources from emergent capacity.

Data and Method

The empirical starting point consists of the supplied seven-dimensional profiles. The scores are treated not as a definitive measure of actual sovereignty, but as a map of initial resources. The provenance and calculation methodology of the indices have not been independently verified; causal interpretations are therefore assessed against observable institutions and practices of digital governance.

The method follows a process-oriented sequence of seven mechanisms:

1. Conversion Sovereignty (CS) — the transformation of digital resources into autonomous state capacity.
2. Dependence Architecture Sovereignty (DAS) — the distribution of dependencies across providers, partners, and technological layers.
3. Alternative Sovereignty (AS) — the availability of functionally viable substitutes for critical technologies and communications channels.
4. Reversibility Sovereignty (RS) — the ability to change a platform, contractor, or data regime without disrupting essential state functions.
5. Boundary Sovereignty (BS) — the ability to set legal and technical limits on the collection, storage, transfer, and use of data.
6. Second-Order Sovereignty (SOS) — influence over international standards, rules, and conceptions of the digital state.
7. Reproductive Sovereignty (RPS) — the ability to sustain and renew personnel, institutions, financing, trust, and infrastructure over time.

Configuration of the Profiles

Estonia’s aggregate advantage is modest—approximately 3% of Rwanda’s score—and derives almost entirely from the technological gap. Excluding the technological dimension, Rwanda’s combined score across the remaining six dimensions would exceed Estonia’s by 20.5 points. The comparison, then, is not a story of one country’s overall superiority: it contrasts Estonia’s technologically concentrated model with Rwanda’s compensating strengths in politics, culture, and security.

The almost identical cognitive scores—57 and 57.1—likewise do not imply equivalent cognitive autonomy. The same score may reflect different combinations of digital skills, state coordination, expert communities, access to information, and society’s ability to critically evaluate digital decisions. Interactions across dimensions therefore matter more than isolated scores.

Conversion Sovereignty

Estonia

The Estonian model illustrates the conversion of technology into administrative, economic, and diplomatic capacity. X-Road provides an open layer for secure data exchange among independent information systems: messages are signed and encrypted, requests are logged, and its federated architecture enables cross-border interaction among different ecosystems. Technological resources thus become not merely a portfolio of services, but a means of managing interoperability without creating a single overarching database.

The e-Residency program extends the jurisdictional reach of the state beyond its population and territory. In 2025, e-residents established 5,556 companies, while direct government revenue from the program and associated companies reached €124.9 million; by early 2026, more than 135,000 people from 185 countries had joined. In terms of Conversion Sovereignty, Estonia has turned digital identity and corporate law into an exportable public service, a stream of tax revenue, and a transnational network of users.

Rwanda

Rwanda also exhibits substantial conversion, but of a different kind: digital platforms primarily extend administrative reach and accelerate service delivery. Established as a public-private partnership, Irembo has developed into a national portal providing access to more than 90 public services; the United Nations identifies it as a contributor to improved e-government performance. The company itself reports more than 100 available services and substantial reductions in processing times, although these figures must be interpreted in light of the operator’s interests as a source.

The Rwanda Digital Acceleration Project, financed by the World Bank and the Asian Infrastructure Investment Bank, provides for expanded broadband access, shared standards and platforms, new digital services, digital identification, and large-scale basic skills training. This model converts external financing and technologies into domestic administrative capacity. Its sovereign effect, however, depends on whether expertise and control over code, data, and system life cycles remain within the country after the projects conclude.

Comparative Assessment

In Estonia, conversion extends from public administration into the economy and international positioning. In Rwanda, it is especially pronounced along the vertical chain linking the state, services, and citizens. Digitalization therefore increases capacity in both countries, but the Estonian model produces a broader set of secondary assets, while the Rwandan model provides a more concentrated instrument of administrative leverage.

Dependence Architecture

Estonia does not eliminate external dependence: it is embedded in the legal, economic, and cybersecurity architectures of the EU and NATO and relies on external cloud and hardware ecosystems. Yet X-Road’s distributed design, open-source code, and capacity for federation reduce reliance on any single centralized platform. Locating a data embassy in Luxembourg turns territory abroad into an Estonia-controlled backup environment capable of sustaining critical services during a crisis.

Rwanda develops its architecture through public-private and international partnerships. This accelerates development but creates concentration risks. The national 4G infrastructure was established as a joint venture between the government and Korea Telecom, with an exclusive wholesale license. The World Bank observed that this monopoly arrangement was associated with low 4G uptake and limited resale of capacity by operators. The ITU also documents a 25-year license under the Korea Telecom partnership.

Estonia’s DAS thus rests on component distribution and redundancy through allied arrangements, whereas Rwanda’s rests on managed long-term partnerships. The latter can rapidly mobilize capital and expertise, but contractual concentration can turn a partner from a source of capacity into an infrastructure bottleneck that is difficult to replace.

Alternative Sovereignty

Alternatives should be measured not by the number of contractors but by the availability of a viable path for switching. X-Road’s open architecture and decentralized ownership of databases create more favorable conditions for Estonia to replace individual components than would a monolithic system. At the same time, the government’s shift toward cloud solutions and its intention to outsource more standard services to the private sector introduce new risks of dependence on cloud providers and software supply chains.

Rwanda offers alternative service-delivery channels: Irembo uses web interfaces, mobile solutions, and USSD, reducing citizens’ dependence on smartphones and continuous high-speed connectivity. But alternatives at the user level are not equivalent to alternatives at the infrastructure level. Long-term agreements, the concentration of services in a single portal, and external project financing raise the cost of changing the technological configuration.

Estonia therefore has stronger infrastructure-level AS, while Rwanda demonstrates useful diversity of access channels. To realize the full sovereign benefit, Rwanda needs to translate multiple interfaces into a choice among interchangeable providers, data centers, and software modules.

Reversibility Sovereignty

Reversibility is reflected in the ability to restore or reconfigure state functions following a cyberattack, provider failure, or geopolitical rupture. Estonia’s data embassy provides extraterritorial backup for critical data and services, while its national digital development strategy integrates digital government, connectivity, and cybersecurity into a unified long-term program. Following the major attacks of 2007, Estonia institutionalized cyber resilience; a recent EU assessment emphasizes the continuity of digital government and infrastructure protection as priorities.

Rwandan policy documents provide for domestic hosting of government data, backups, disaster recovery, annual risk assessments, and continuity plans. The 2024–2029 strategy also envisages secure data centers, public key infrastructure (PKI), and national cyber resilience. This indicates a transition from basic digitalization toward institutionalized reversibility, although empirical validation would require evidence on recovery times, system portability, and contract termination provisions.

In Estonia, then, RS has already taken material form in a distributed architecture and experience-based learning from crises. Rwanda is developing the legal and organizational foundations, but reversibility remains constrained by concentrated infrastructure and platform dependencies.

Boundary Sovereignty

Estonia combines technical access controls with legal constraints and a high degree of internet freedom. Freedom House gave the country a score of 91 out of 100 for internet freedom in 2025, retaining its “Free” designation. In this configuration, Boundary Sovereignty means not only the state’s ability to protect data, but also institutional limits on intervention by the state itself.

Rwanda has adopted personal data protection legislation and is developing PKI, national cybersecurity authorities, and domestic hosting of government data. Human rights assessments, however, point to censorship, surveillance, and restrictions on online expression; the country received 36 out of 100 and a “Not Free” designation in Freedom on the Net. This creates a fundamental distinction between state sovereignty over the digital environment and the sovereign capacity of the political community.

When digital boundaries protect a system against external interference, they strengthen autonomy. When the same instruments diminish the independence of public information and feedback, they may increase short-term governability while weakening the cognitive correction of decisions. An informational score therefore cannot automatically be interpreted as informational sovereignty: the distribution of control among the state, citizens, and external platforms must also be considered.

Second-Order Sovereignty

Estonia has converted its domestic experience of digital governance and cyber threats into influence over international rules. Tallinn hosts the NATO-accredited Cooperative Cyber Defence Centre of Excellence, which conducts research, training, and major international cyber exercises. X-Road is used beyond Estonia, while e-Residency exports not only a service but also a conception of digital jurisdiction.

Rwanda seeks to establish itself as a regional digital hub through Smart Africa. Rwanda played an active role in launching the initiative, whose manifesto was subsequently endorsed at the African Union level; its agenda encompasses digital identity, broadband infrastructure, and a single digital market. This demonstrates that relatively limited technological resources do not preclude SOS: a state can influence rules through coalition entrepreneurship and diplomacy centered on institutional forums.

Estonia’s advantage lies in combining normative influence with a proven technical architecture and allied institutions. Rwanda helps shape the regional agenda, but its Second-Order Sovereignty remains more dependent on the successful implementation of continental initiatives and external financing.

Reproductive Sovereignty

Estonia reproduces its digital capacity through continual strategy updates, cyber exercises, specialized institutions, and accumulated experience. Digital Agenda 2030 is translated annually into four-year programs, while cybersecurity is treated as one of the three foundational pillars of the digital society. Budget documents nevertheless identify sustainable funding for system development and maintenance as a distinct challenge, demonstrating that even a mature digital model does not reproduce itself automatically.

Rwanda builds RPS through widespread digital literacy, professional training, the Cyber Academy, data protection institutions, and shared digital infrastructure. One positive sign is Irembo’s transition to an in-house technology team after the initial involvement of a foreign partner, indicating a degree of internalization of expertise. The risk is that rapid system expansion may outpace the development of a domestic professional labor market, independent oversight, and sustainable budgetary support for maintenance.

Reproductive Sovereignty requires the reproduction not only of engineering expertise but also of public trust. Restrictions on debate and digital surveillance may encourage administrative discipline, yet they also reduce the system’s ability to detect its own errors. Long-term RPS therefore depends on the combination of technical training, institutional memory, legal safeguards, and open feedback.

Systemic Comparison

In Estonia, the systemic effect arises from a sequence: open architecture → distributed data → redundancy → learning from crises → international rulemaking. Each successive element amplifies the returns from the preceding one: technology becomes a resilient state function and then a source of external influence.

Rwanda follows a different sequence: political coordination → external partnership → infrastructure → unified service interface → expanded administrative reach. This chain can deliver results rapidly, but its sovereign effect diminishes if critical platforms cannot be replaced, contracts are difficult to renegotiate, and society’s digital feedback is constrained.

Testable Hypotheses

H1 — Open architecture: at equivalent levels of digitalization, states with open standards and modular systems exhibit greater Alternative Sovereignty.

H2 — Redundancy: extraterritorial or multizone backup arrangements increase Reversibility Sovereignty only when the state retains legal and operational control.

H3 — Platform concentration: a unified portal initially increases Conversion Sovereignty but, beyond a certain threshold, reduces AS and RS in the absence of data portability and replaceable modules.

H4 — External financing: donor funding enhances digital capacity but becomes a sovereign resource only when code, expertise, and maintenance authority are transferred to national institutions.

H5 — Digital rights: all else equal, protections for freedom of expression and independent oversight enhance long-term Cognitive and Reproductive Sovereignty through more effective error correction.

H6 — Cyber crises: experiencing an attack enhances sovereign capacity only when lessons learned are translated into institutions, budgets, exercises, and international cooperation.

H7 — Export of standards: a digital model generates Second-Order Sovereignty when other states adopt not merely a specific technology but also its rules, architecture, or legal categories.

H8 — Configuration effect: the aggregate index explains digital autonomy less effectively than a combination of the technological score with alternatives, reversibility, user rights, and the reproduction of expertise.

Indicators for Testing

Empirical testing requires additional indicators not included in the original profiles:

• the share of critical systems using open-source code or documented interfaces;
• the number of interchangeable providers at each critical layer;
• the cost and time required to migrate between clouds, data centers, and platforms;
• the actual recovery time for critical services following an incident;
• the share of government data covered by verified backups;
• the share of contracts providing for data portability, code transfer, and training of national personnel;
• the share of domestic specialists involved in operating key platforms;
• the concentration of international financing and infrastructure contracts;
• the number of foreign implementations of national digital standards;
• the independence of personal data oversight and the ability to challenge digital decisions in court;
• the population’s digital skill levels and disparities in access across regions and social groups;
• sustainable budgetary funding for ongoing maintenance, rather than only for system launches.

Conclusion

The cases of Estonia and Rwanda offer particularly compelling evidence of the non-additivity of emergent sovereignty. Their aggregate profiles differ by only 11.3 points, yet the mechanisms underlying digital autonomy are configured differently. Estonia’s technological advantage is reinforced by distributed architecture, redundancy, institutionalized cyber resilience, and international rulemaking; a single high technological score therefore generates an effect greater than its arithmetic contribution.

Rwanda successfully converts political coordination and external partnerships into public digital infrastructure and services. Platform and contractual concentration, reliance on external financing, and restrictions on digital rights, however, generate a countervailing effect: administrative capacity grows faster than alternatives and societal autonomy. This does not negate Rwanda’s digital achievements, but shows that state efficiency and emergent sovereignty are not synonymous.

Digitalization becomes a source of sovereign agency under five conditions: the state controls critical data; the architecture permits component replacement; functions can be restored after a disruption; society retains cognitive and informational autonomy; and expertise and financing can be reproduced domestically. In the absence of these conditions, digital power may accelerate governance while diminishing strategic freedom. The relevant question, therefore, is not “How digitalized is the state?” but “Can it modify, protect, and reproduce its digital system without sacrificing functionality or the political freedom to choose?”