Public cloud or cloud run by external organisations can never provide data sovereignty, by definition.

Absolutely, especially in the KSA.