Deutsch
English
Español
Français
Nederlands
Português
What is EU Cloud Sovereignty?
The European Commission has allocated €180 million for EU institutions to purchase European cloud services over the next six years, marking a significant step in the bloc's digital sovereignty strategy. This funding initiative aims to reduce Europe's dependence on American cloud providers like Amazon Web Services, Microsoft Azure, and Google Cloud, which currently dominate over 70% of the EU cloud market. The move represents a strategic push for greater digital autonomy and control over critical infrastructure.
Background: Europe's Digital Dependency Challenge
For years, European institutions and businesses have relied heavily on U.S.-based cloud providers, raising concerns about data sovereignty, legal jurisdiction, and strategic autonomy. Under U.S. laws like the CLOUD Act, American authorities can request data from U.S. companies regardless of where it's stored globally. This creates significant sovereignty concerns for European governments and institutions handling sensitive information. The EU digital sovereignty strategy has been developing for several years, but this €180 million procurement represents one of the most concrete implementations to date.
The Four Selected European Cloud Providers
The European Commission has awarded contracts to four European cloud service providers through a competitive tender process:
- Post Telecom (Luxembourg) - Partnering with OVHcloud and CleverCloud in a Luxembourgish-French consortium
- STACKIT (Germany) - A German cloud infrastructure provider
- Scaleway (France) - Part of French telecom group Iliad
- Proximus (Belgium) - Leading a consortium with Mistral AI, Clarence, Thales, and Google Cloud's S3NS joint venture
These providers were selected based on the Commission's new Cloud Sovereignty Framework, which evaluates companies across eight key sovereignty objectives.
Understanding the Cloud Sovereignty Framework
The EU's Cloud Sovereignty Framework introduces Sovereignty Effectiveness Assurance Levels (SEAL) ranging from 0-4, with most selected providers achieving SEAL-3 (Digital Resilience level). This means their services are immune from supply chain disruption from non-EU third parties. The framework measures sovereignty across eight dimensions:
- Strategic autonomy and control
- Legal and regulatory compliance
- Operational independence
- Environmental sustainability
- Supply chain transparency
- Technological openness
- Security and resilience
- Compliance with EU laws and values
European vs. U.S. Cloud Providers: Key Differences
| European Cloud Providers | U.S. Cloud Providers |
|---|---|
| Subject to EU data protection laws (GDPR) | Subject to U.S. laws including CLOUD Act |
| Data centers located within EU jurisdiction | Global data center network |
| Approximately 15% EU market share | Over 70% EU market share |
| Focus on digital sovereignty compliance | Focus on global scale and features |
| Government-backed strategic initiatives | Commercial market dominance |
'This procurement sets a benchmark for secure, compliant cloud adoption across the EU public sector,' stated a European Commission spokesperson. 'We're demonstrating that European providers can meet strict sovereignty criteria while delivering state-of-the-art technology.'
Strategic Implications for EU Digital Autonomy
The €180 million funding represents more than just a procurement decision—it's a strategic signal to both European governments and private sector companies. By leading by example, the European Commission hopes to encourage broader adoption of European cloud services across the continent. This initiative comes as part of a broader European digital sovereignty package expected to be presented in late May 2026, which will include additional measures to strengthen Europe's technological independence.
The timing is particularly significant given growing geopolitical tensions and concerns about over-reliance on foreign technology. European officials have expressed concerns about both U.S. and Chinese technological dominance, with this cloud initiative representing a concrete step toward reducing that dependency. The funding will be available for the next six years, providing EU institutions with a framework agreement for purchasing sovereign cloud services.
FAQ: European Cloud Sovereignty Questions Answered
What is digital sovereignty?
Digital sovereignty refers to a nation or region's ability to exercise control over its digital infrastructure, data, and technology without excessive dependence on foreign providers or jurisdictions.
Why is the EU investing in European cloud services?
The EU is investing to reduce dependence on U.S. cloud providers, ensure data remains under European legal jurisdiction, strengthen strategic autonomy, and support the growth of European technology companies.
How much market share do European cloud providers have?
European cloud providers currently control less than 15% of the EU cloud market, while U.S. providers (AWS, Microsoft, Google) dominate with over 70% market share.
What are SEAL levels in the Cloud Sovereignty Framework?
SEAL (Sovereignty Effectiveness Assurance Levels) range from 0-4 and measure how effectively cloud services maintain sovereignty across eight key objectives, with SEAL-3 representing Digital Resilience level.
Will this affect existing contracts with U.S. cloud providers?
Existing contracts will continue, but new procurement for EU institutions will prioritize European providers where possible, and the initiative may influence broader market trends toward European technology solutions.
Sources
European Commission Press Release | CNBC Analysis of EU Digital Dependency | Global Banking & Finance Report
Follow Discussion