At the European Data Center Associations Summit hosted by Vertiv, industry leaders argued that AI growth is forcing data centres to rethink their relationship with power grids, communities and policymakers.

Data centres are increasingly being asked to do more than simply consume electricity and provide computing capacity. As AI drives unprecedented demand for digital infrastructure, industry leaders across Europe are beginning to position data centres as active participants in the wider energy ecosystem.

That was one of the central themes emerging from the European Data Centre Associations Summit, hosted by Vertiv in Zagreb, where representatives from data-centre associations across Sweden, the Netherlands, France and Ireland discussed the infrastructure supporting Europe’s digital economy.

The conversation began with a reminder of how invisible data centres remain to most users. Consumers may interact with data centre infrastructure dozens of times every day, through banking, digital payments, video calls, cloud applications and government services, without ever thinking about the physical systems behind those services.

But AI is making that infrastructure increasingly difficult to ignore.

From grid burden to grid participant

As data centre demand expands, access to electricity has become one of the sector’s biggest constraints. Yet the panel argued that data centres should not necessarily be viewed purely as an additional burden on already stretched electricity networks.

Stijn Grove, Managing Director of the Dutch Data Center Association, pointed to the potential for data centres to locate closer to renewable-energy generation and absorb power that might otherwise require significant additional transmission infrastructure.

He also highlighted a broader opportunity: data centres could potentially help stabilise grids as renewable generation becomes more variable.

That idea was echoed by Ronan Kelly, CEO of Digital Infrastructure Ireland, who discussed the role of battery energy-storage systems and on-site backup capacity in supporting electricity networks during periods of peak demand.

The direction of travel is significant. Data centres are beginning to move from simply asking “How much power can the grid give us?” towards asking “How can our infrastructure interact with the grid?”

Waste heat becomes an asset

The panel also highlighted heat reuse as one of the clearest examples of how data centres can integrate more deeply into local communities.

Isabelle Kemlin, Vice Chair of the Board at Swedish Datacenter Industry, cited examples where waste heat from data centers is being reused through district-heating systems and even agricultural applications.

In the Netherlands, Grove pointed to projects where data-centre heat is being used to replace natural gas in buildings and potentially support greenhouse operations.

Such projects challenge the perception of data centres as isolated industrial buildings that simply consume electricity and generate heat. Increasingly, the heat itself can become part of another energy system.

AI changes the efficiency conversation

AI is also forcing the industry to reconsider how data center efficiency should be measured.

Traditional measures such as Power Usage Effectiveness (PUE) remain important, but several speakers argued that they do not always capture the complete picture.

For example, equipment installed to recover and redistribute waste heat may consume additional electricity and therefore worsen a facility’s PUE, even though the overall energy system becomes more efficient.

The discussion therefore moved towards a newer metric increasingly associated with AI infrastructure: tokens per watt.

Instead of measuring only how efficiently a facility delivers electricity to IT equipment, tokens per watt attempts to connect energy consumption with the amount of useful AI computation produced.

As AI factories become larger and more power-intensive, the ability to convert electricity into useful compute efficiently may become as important as simply minimising facility overhead.

Europe’s sovereignty challenge

Energy is not the only reason Europe will continue to require significant local data center capacity.

The panel also highlighted digital sovereignty.

Europe’s fragmented national landscape means governments, public-sector organizations, and regulated industries frequently need to consider where data is stored and processed. Moving workloads across borders may be technically possible, but sovereignty, security, and latency requirements can make local infrastructure essential.

That creates a very different environment from markets where computing resources can be concentrated across a smaller number of enormous geographic regions.

The public-perception problem

Perhaps the industry’s biggest challenge, however, is not technical.

Several panellists acknowledged that public perceptions of data centers remain dominated by concerns around electricity consumption, water usage, land requirements and limited employment creation.

Michaël Reffay, Managing Director of France Data center, argued that many of these criticisms overlook the wider economic and digital services supported by data center infrastructure.

Kelly made a similar point, arguing that discussions about data centre carbon emissions frequently focus only on the electricity consumed by facilities while ignoring emissions potentially avoided through digital services such as remote working, digital banking and electronic distribution.

The industry therefore faces a communication challenge alongside its engineering one.

Data centers will consume significant amounts of energy as AI expands. But the sector increasingly wants policymakers and the public to judge that consumption alongside the digital services, economic activity, renewable-energy investment, and wider infrastructure benefits it enables.

AI makes infrastructure strategic

Perhaps the clearest conclusion from the discussion was that digital infrastructure is no longer simply a back-end utility.

AI is making access to power, cooling, grids and computing capacity strategic economic issues.

For Europe, the next phase of the data centre debate may therefore be less about whether more facilities should be built and more about where they are built, how they interact with energy systems, and how effectively the industry can demonstrate their value to society.

Nearly every enterprise believes its AI agents are properly scoped. Only a third have actually made sure of it.

Today, new research from Cequence Security, the leader in application, API, and agentic AI protection, and Enterprise Management Associates (EMA) found that 94% of enterprise IT and security leaders are confident their AI agents do not have more access than they need, yet only 33% actually provision agents with least-privilege access. The remaining two-thirds run on broad standing permissions that are reviewed periodically, rarely reviewed, or never reviewed at all.

That gap between confidence and practice is already showing up in production, not a theoretical risk, but as incidents enterprises are living with right now. Among the organizations surveyed:

• 65% have experienced an AI agent take an action outside its intended scope, including 29% with measurable business impact, including data exposure, financial loss, operational disruption, or reputational damage. Another 36% caught a near-miss before it caused damage.

• Only 32% can detect and contain an out-of-scope agent action within minutes through automated means; 55% need hours and manual steps to respond.
• In approximately 4% of organizations surveyed, the first sign of trouble came from a customer or outside partner, not an internal system.

The findings point to one clear story. Governance has not kept pace with the speed of agentic AI deployment, and that gap is showing up at every stage of the agent lifecycle, from how agents are provisioned, to how their actions are authorized, to how they are decommissioned once a pilot ends. Other key findings from the report include:

Enterprises Have Moved Past the Pilot Stage

The scale of deployment makes the gap more urgent. 46% of organizations report they are already scaling agentic AI across multiple departments and production workflows, and 79% are running generative and agentic AI simultaneously. Further, more than 92% report an increase in AI and bot-driven traffic targeting customer-facing applications and APIs.

Authorization is Checked at the Wrong Time, Or Not At All

That governance gap extends to how access is enforced in the moment an agent acts. Only 34% of organizations evaluate an AI agent’s authorization at the moment it attempts a specific action. The majority rely on periodic policy reviews or standing permissions set once at provisioning and never revisited, meaning an agent’s access can quietly outlive the task it was originally granted for, and keep working long after anyone signed off on it.

Abandoned Pilots Are Leaving Live Credentials Behind

Additionally, there’s an increasing risk in how enterprises manage agents that don’t make it to production. 31% of agentic AI pilots have been paused indefinitely, discontinued, or abandoned. Many were real deployments with real system access and credentials that were never cleaned up. Every abandoned pilot with live credentials is exposure nobody is actively watching.

External Connectivity Carries the Same Risk

14% of organizations allow AI agents to connect to outside tools and data sources via the Model Context Protocol (MCP) without restriction. Among the majority who do limit those connections to an approved list, fewer than half, just 49%, have a dedicated team actively maintaining and auditing that list on a regular basis.

Christopher M. Steffen, CISSP, CISA, VP of Research at EMA, said: “This research shows enterprises have moved well past experimentation with agentic AI right into production, and governance has not kept pace with that shift. The gap isn’t a lack of awareness; most organizations have policies in place and express real confidence in them. The gap is between what’s written down and what’s enforced when an agent takes an action nobody approved. That disconnect shows up most clearly in how organizations authorize agent actions and monitor them once they’re live, and it’s the reason incidents are happening at a rate the industry hasn’t fully reckoned with.”

Shreyans Mehta, Co-founder and CTO at Cequence, said: “The number that jumped out to me is the 92% being confident in their governance frameworks. Confidence like that is a trap; it’s exactly why organizations stop looking for problems, stop investing in monitoring, and let authorization checks lapse until an incident forces the conversation. This is the exact blind spot Cequence is built to close, giving security teams real-time visibility into what AI agents are actually doing and enforcing authorization at the moment an agent acts, not after the fact.”

Dhruva will adopt the Ryan brand across the UAE and Saudi Arabia by the end of 2026, uniting the practice with Ryan’s global identity and international platform.

Dhruva, a leading tax consultancy firm in the Middle East, and Ryan, a leading global tax services and software provider, today announced that Dhruva will transition to the Ryan brand across the United Arab Emirates (UAE) and the Kingdom of Saudi Arabia. The rebranding will be completed by the end of 2026, bringing the practice under Ryan’s global identity and reinforcing its position as part of the world’s leading global-scale specialist in business tax.

The transition marks the next phase of the strategic joint venture announced in 2025 and reflects the continued integration of Dhruva’s regional capabilities with Ryan’s global platform, technology, and international resources. Clients across the Middle East will continue to benefit from the same trusted advisory teams, enhanced by access to Ryan’s worldwide expertise and service capabilities.

“The Middle East has been a strategic growth market for us for many years, and we have built a strong advisory practice founded on deep client relationships, technical excellence, and local market understanding,” said Dinesh Kanabar, Founder, Chairman, and CEO, Dhruva Advisors and Vice Chairman, Ryan.

“The transition to the Ryan brand marks a significant milestone in our journey and reflects the strength of our partnership. By combining our regional expertise with Ryan’s global scale, technology, and international capabilities, we are creating an even stronger platform to support clients across the region as they navigate an increasingly dynamic and evolving tax landscape.”

“The Middle East is one of the most important growth markets for tax advisory services globally, and we are investing in the region with a long-term view,” said Tom Shave, President of Ryan’s European and Asia-Pacific Operations. “Uniting under the Ryan brand strengthens how we serve clients across the UAE, Saudi Arabia, and Europe—bringing seamless access to our global expertise, technology, and international resources through one trusted platform. This transition marks an important milestone in our integration and reinforces our commitment to the region’s future.”

Ryan will continue to invest in its Middle East operations, expanding its team, capabilities, and regional presence across key markets, including Dubai, Abu Dhabi, and Riyadh. The practice provides comprehensive tax advisory services spanning corporate tax, value-added tax (VAT) and indirect tax, transfer pricing, mergers and acquisitions (M&A) tax structuring, research and development (R&D), and cross-border compliance.

“The response from our clients over the past year has been the clearest validation of this partnership,” said Nimish Goel, Leader, Middle East, Dhruva, a Ryan Affiliate. “From the outset, our teams have been integrating Ryan’s global capabilities in technology, specialized expertise, and best practices into the work we already lead in the region. Adopting the Ryan brand is the natural next step. It is the same people and the same trusted relationships, now carrying the name of the largest Firm in the world dedicated exclusively to business taxes.”

The rebranding will be implemented in phases during the second half of 2026, with signage, visual identity, and digital properties transitioning to the Ryan brand across the region.