The Philippines’ digital growth needs trusted cloud

The Philippines is fast becoming one of Southeast Asia’s leading digital economies. But if cloud adoption and data-center growth outpace cyber resilience and digital trust, that progress will rest on fragile foundations.

In 2025, Philippine authorities warned of repeated foreign attempts to access sensitive government data. The Philippines is currently ranked among the top 10 countries globally in terms of users experiencing cybersecurity attacks such as malware, phishing attempts and ransomware.

The country has done a great deal to make digital infrastructure easier to build and use. It must now do more to make that infrastructure worthy of trust.

The Philippines’ digital growth story is real. Industry estimates suggest the Philippine data-center market could more than triple by 2031. These data centers help drive cloud adoption across both government and business.

The Department of Information and Communications Technology's (DICT) Cloud First policy helped move core government services toward the cloud. Government cloud adoption grew from just 5% in 2022 to over 15% by 2024.

The Philippines’ jump in the UN E-Government Development Index between 2022 and 2024 showed what can happen when digital public infrastructure starts to improve. The point is simple: the Philippines is no longer preparing for the digital economy. It is already building it.

This momentum matters because cloud and data infrastructure are the foundation for everything policymakers say they want more of: AI adoption, digital services, modernized government, more productive small businesses and greater participation in the regional and global digital economy. 

In the AI era, these are not just commercial assets. They are strategic infrastructure. In a more contested digital environment, resilience can no longer be treated as a technical afterthought.

That is why the next phase of digital policy must focus not only on adoption, but on trust. Not all cloud services are equal. A provider's cost and connectivity say nothing about its resilience, governance, transparency, incident reporting, auditability, or data protection practices. This matters particularly when comparing providers from very different legal and political environments. 

For example, American cloud providers operate in a system where government requests for data are publicly debated, subject to legal process, and increasingly disclosed through transparency reports.

Chinese cloud providers operate under a far more opaque system, including sweeping national security and intelligence laws that provide little meaningful reassurance to foreign governments, businesses, or citizens about how requests for access to data will be handled. As more sensitive data and AI workloads move into cloud environments, those questions become more important, not less.

The launch of the Cybersecurity Council of the Philippines is a welcome step. It signals that the government takes public-private coordination on cyber resilience seriously.

But that same urgency now needs to be applied to cloud and data infrastructure governance, where the stakes are comparable and the pace of investment is even faster. 

This is becoming even more important because the Philippines is no longer just a consumer of digital infrastructure. It is starting to position itself as a strategic node in trusted AI and supply-chain ecosystems.

In April 2026, Manila joined Pax Silica, a U.S.-led initiative designed to secure the technology supply chain across areas such as advanced manufacturing, critical minerals, data infrastructure and AI.

At the same time, the United States and the Philippines announced plans for a 4,000-acre Economic Security Zone in New Clark City, described as the first “AI-native” industrial acceleration hub under Pax Silica. 

These initiatives are best understood not simply as investment announcements, but as signals that the Philippines is being drawn into a more strategic competition over who will build, host, and govern the digital infrastructure underpinning the next wave of AI-led growth.

If that is the direction of travel, then trust, resilience, and cloud governance become even more central to the Philippines’ potentially growing role in the global AI supply chain ecosystem.

Trust in digital infrastructure should not rest on marketing claims. It should be demonstrated through adherence to international technical standards, independent audits, and strong governance practices. That is especially important in an environment where some providers can point to independent certifications, transparency reporting, and clear legal process, while others cannot credibly demonstrate the same level of independence from state demands.

That logic is already gaining ground in Philippine digital-policy debates, including around the Konektadong Pinoy Act. Standards, audits, and accountability are not barriers to growth. They are what make growth durable.

DICT and the Cybersecurity Council should work together to develop a practical framework for assessing cloud providers against internationally recognized security, audit and governance benchmarks. Such a framework would help Philippine decision-makers compare providers not only on price and capacity, but also on legal predictability, protection against unwarranted government access to data, and the credibility of their safeguards for sensitive public and commercial workloads.

A shared framework would give government agencies, companies, and small and medium-sized firms a transparent way to distinguish cloud services that are merely available from those worth trusting with sensitive data and AI workloads.

It would reduce cyber risk, encourage better market practices, and support more informed cloud adoption across government and critical sectors. It would also strengthen the Philippines’ case as a destination for higher-value digital investment in cloud, AI, and data-driven services.

The Philippines has an opportunity to lead not only in digital adoption, but in how digital infrastructure is governed. If it matches its cloud ambitions with a stronger trusted cloud agenda it will do more than reduce cyber risk. It will help secure the digital foundations of national resilience, economic dynamism, and democratic confidence.

Nigel Cory is a non-resident fellow of the National Bureau of Asian Research and director of Crowell Global Advisors.