Delta ReportCONFIDENCE MODERATEJune 2026

The Microsoft, G42 and Kenya Digital Ecosystem Initiative

A one billion dollar promise, signed as a letter of intent, framed as historic, and stalled two years on.

CONFIDENCE: MODERATE. Based on a letter of intent, not a binding agreement. The definitive terms are not in hand, so findings on enforceability and data governance are provisional. The ratification record, any parliamentary record, and Kenya's status under the Malabo Convention are unavailable.

Bottom line

The Letter of Intent projects a one billion dollar investment and sweeping connectivity and sovereignty commitments, but the binding definitive agreements have never been made public. Every substantive data governance term, including who controls national data, what access foreign governments and law enforcement retain, and what exit rights Kenya holds, sits exclusively in those unpublished documents. The gap between the public framing and the verifiable record is therefore wide. Affected findings are provisional pending disclosure of the definitive agreements, the parliamentary record, and Kenya's ratification status under the Malabo Convention.

The parties and the instrument

The engagement is a Letter of Intent signed on 24 May 2024 during President William Ruto's state visit to the United States, between Microsoft, G42 (an Abu Dhabi based artificial intelligence firm), and Kenya's Ministry of Information, Communications and the Digital Economy. It is a letter of intent, not a treaty and not a binding contract, and the definitive agreements that were to follow have not been made public. The headline is a G42 led initial investment of one billion dollars, centred on a geothermal powered data center in Olkaria hosting Microsoft Azure for a new East Africa Cloud Region, with a first phase of about 100 megawatts scalable toward one gigawatt. As of May 2026 the project had stalled, with President Ruto acknowledging that powering a facility of that scale could require cutting electricity to much of the country, and discussion shifting toward a reduced 60 megawatt option with the local developer EcoCloud.

The constitutional and treaty backdrop

Article 31 of the Constitution of Kenya 2010 protects the right to privacy, the constitutional anchor for any arrangement that stores and processes Kenyan citizen and government data. The Data Protection Act, 2019 gives effect to Article 31, establishes the Office of the Data Protection Commissioner, and sets conditions for transferring personal data outside Kenya, with provisions touching data localization. A cloud first government policy moving national data onto infrastructure operated by foreign firms engages this Act directly. At the continental level, the African Union Malabo Convention on Cyber Security and Personal Data Protection, in force since 2023, is the relevant instrument, though Kenya's signature and ratification status should be verified and is flagged here as an open item.

The Delta

What the public account emphasised	What the text or record shows	Assessment
President Ruto called this the largest single private sector digital investment in Kenya's history and projected Kenya as a future digital leader	The instrument is a Letter of Intent, not a binding agreement; the definitive agreements were never published; and the project had stalled by May 2026. The non binding character was not foregrounded	material omission
Roughly 1,000 direct and 5,000 indirect jobs, with the data center as the backbone of the digital economy	No published document records a contractual basis for these figures, and by May 2026 the headline facility was in question and a reduced 60 megawatt option under discussion	material omission
A trusted data zone meeting global standards for safety, privacy and security, with Kenyan data sovereignty protected	The binding terms defining data control, operator and home government access, law enforcement access, and exit rights sit in the unpublished agreements. Only general language is public	material omission
A straightforward digital opportunity among Kenya, the United States and the UAE, with no security complications flagged	The project requires United States Department of Commerce approval, US officials flagged concerns over G42's ties to China, and the underlying Microsoft investment in G42 was brokered to limit Chinese access to advanced AI	material omission

A non binding instrument presented as a historic commitment

President Ruto described the Letter of Intent as the largest single private sector digital investment in Kenya's history, and official messaging projected Kenya as an emerging digital leader. The instrument is explicitly a letter of intent, the definitive agreements creating enforceable obligations were never published, and by May 2026 the project had visibly stalled. The non binding character of the signed instrument was not foregrounded.

Job and economic projections without a verifiable basis

Messaging projected roughly 1,000 direct and 5,000 indirect jobs and positioned the data center as the backbone of the digital economy. No published document records a contractual basis for these figures, since the definitive agreements are not public. By May 2026 the original 100 megawatt facility was in question and a reduced 60 megawatt option with a different developer was under discussion, indicating non delivery against the projected scale.

The unpublished governance terms

The trusted data zone language was offered as evidence of a credible data sovereignty architecture. The binding terms governing data control, law enforcement access by US or UAE authorities, and exit rights for Kenya all sit in the unpublished agreements. A cloud first policy storing national data on foreign owned infrastructure engages the Data Protection Act 2019 and Article 31 directly, yet no public document shows how those instruments are satisfied. Civil society has raised these questions explicitly.

The security entanglement left out of the public account

Official framing presented the initiative as a straightforward opportunity among three partners. In fact the project requires United States Department of Commerce approval, US officials flagged national security concerns over whether G42 had fully severed ties with China, and the April 2024 Microsoft investment in G42 was brokered by the US government to limit Chinese access to advanced AI. These constraints were material to whether and how the project could proceed and were absent from public messaging.

The power reading

The asymmetry flows from three facts in the record. The binding terms sit in unpublished agreements, so Kenya has no publicly verifiable basis on which to enforce or contest what was announced. The infrastructure will be owned and operated by two foreign entities, one American and one Emirati, whose own relationship was shaped by the United States government and carries US security conditions including Commerce Department approval. And Kenya's cloud first policy moves government data onto that foreign controlled infrastructure before the governance terms protecting it have been made public. Kenya's positional assets, geothermal power and a stated cloud first commitment, are real, but Ruto's own admission that the facility could strain the grid shows even the infrastructure Kenya offered carried constraints not foregrounded in 2024.

What to watch

Publication of the definitive agreements, the single event that would let the trusted data zone language be tested against enforceable terms.
United States Department of Commerce approval, and the conditions attached to it.
Viability of the Olkaria facility, given the grid constraint and the reduced 60 megawatt option.
Kenya's status under the Malabo Convention, which would clarify the applicable continental obligations.

Sources

Microsoft and G42 announce a one billion dollar digital ecosystem initiative for Kenya, Microsoft, 22 May 2024.
Microsoft and G42 to build geothermal data center in Kenya, Bloomberg, 22 May 2024.
Microsoft and G42 Kenya data center deal, TechRadar.
Microsoft, G42 to invest in geothermal powered data center in Kenya, ThinkGeoEnergy, 23 May 2024.
Microsoft, G42 Kenya data center deal raises US scrutiny, TechCentral, July 2024.
Microsoft and G42's Kenya project raises security concerns, InCArabia, July 2024.
From blooms to bytes, Global Voices, May 2026.
Microsoft's G42 Kenya data center stalls after payment dispute, Foreign Policy Journal, May 2026.
Kenya's Microsoft AI data center project stalls over electricity limits, Techweez, May 2026.
Constitution of Kenya 2010, Article 31; Data Protection Act, 2019, Laws of Kenya; African Union Convention on Cyber Security and Personal Data Protection, in force 2023.

Corrections

None to date.