Trusted Tech Alliance establishes five principles for secure technology

Trusted Tech Alliance establishes five principles for secure technology

Sixteen tech companies from eleven countries, including Microsoft, Google Cloud, Ericsson, and SAP, launched the Trusted Tech Alliance (TTA) at the Munich Security Conference. The alliance aims to embed transparency, security, and data protection throughout the entire tech stack, from connectivity and cloud to semiconductors and AI.

The group does not mince words: the world is divided and doubts about the reliability of technology partners are growing. To respond to these shifts, the sixteen prominent tech companies hope to inspire confidence. More may follow, but the founders of the TTA are Anthropic, ASML, AWS, Cassava, Cohere, Ericsson, Google Cloud, Hanwha, Jio, Microsoft, Nokia, Nscale, NTT, Rapidus, Saab, and SAP. This represents a relatively large geographical reach from America to Asia, Africa, and Europe, and includes AI players, chip companies, and industrial tech parties.

They are committed to five principles: transparent governance, operational transparency with secure development, robust oversight of supply chains, an open digital ecosystem, and compliance with the rule of law and data protection.

Trust above nationality

The principles are designed to ensure that companies in the alliance, regardless of their nationality, comply with shared obligations. Brad Smith, Vice Chair and President at Microsoft, who has previously been active on behalf of his company in such initiatives, speaks of “clear and verifiable principles” that form the foundation of the TTA.

The emphasis on the international nature of the alliance appears to be a response to the current tensions between geopolitical blocs. Whereas the US has long been seen by Europeans as an uncomplicated partner, fear and doubt about the legislation that American parties must comply with have taken hold. Even though little has changed in terms of legislation, the fact is that the US and Europe are for the first time taking into account a greater distance between them. This would significantly reduce the potential market for American parties, but also limit the scope for European tech companies to sell in the US.

Tech companies have shared interests in this regard and are already coming together more often to promote openness, security, and/or flexibility. Examples include the Open Telecom AI Platform, Open Compute Foundation, and Ultra Ethernet Consortium. Although each of these initiatives has its own focus, the underlying thinking is similar. At present, the basis for the Trusted Tech Alliance seems to be more philosophical than technical, even with the principles that have been set out. These are general and open to interpretation, especially as they affect all kinds of sectors. Openness means something different for a hyperscaler than it does for a data platform, industrial supplier, or chip machine manufacturer.

Role still unclear

We are curious to see the situations in which the TTA will make itself heard. In initiatives related to sovereignty, tech companies may take a joint position through the TTA. With interoperability as a goal, new participants in the group can accompany their accession with compatible solutions. Given the focus on security during the event in Munich, it is possible that the TTA will produce evidence of secure policies in this area, for example to meet sovereignty requirements. However, the role and task of the new group is still rather vague.