A tribal nation is a sovereign government, not a vertical market, and I’ve watched that single fact reorder every technical question an AI project thought it had already answered.
Who owns the records? Who can authorize their use? Where will the data and any models derived from it reside? Which of the nation’s own laws, cultural rules, and governmental processes apply? Can the nation operate the system after the outside company leaves, and what happens to everything when a contract ends? Those read like preferences to a vendor. They’re governance requirements, and they come before model choice, procurement, or schedule.
Useful frameworks exist for thinking about this, and they’re worth naming. The CARE Principles for Indigenous Data Governance center Collective Benefit, Authority to Control, Responsibility, and Ethics, a deliberate counterweight to projects that ask only whether data can be processed while ignoring who should decide. OCAP® does related work for First Nations data through ownership, control, access, and possession; it belongs to the First Nations Information Governance Centre, and I’m careful never to flatten it into a generic sticker for every nation in the United States. The starting authority’s always narrower and closer to home: this nation’s law, this council’s policy, these designated data stewards.
Architecture follows from there. Enrollment, health, court, public-safety, natural-resource, and language materials may require local custody with tightly bounded access, and a language model trained on a nation’s recordings is itself a governed artifact. Supplying the compute never made anyone the owner of what the compute produced.
My own vantage point comes from tribal emergency management, where outside systems arrive carrying assumptions about connectivity, staffing, and procurement that don’t survive contact with the place. The fix was never a “tribal edition” of somebody’s standard package. It was listening long enough for the nation to define the problem, then building to its terms of custody.
One test cuts through every pitch deck in this space. When the engagement ends, does the nation hold the infrastructure, the data, the derived models, the administrator knowledge, and the unilateral authority to decide every future use? Any answer that routes through continuing vendor permission means the architecture’s preserved dependence and called it a deployment.
Sovereignty means who decides, who holds, who benefits, and who can say no. It was never an adjective to bolt onto AI.