Key Takeaways
- The European Commission has awarded up to €180 million in sovereign cloud contracts to four European providers.
- The contracts are intended to ensure diversification, resilience, and immunity from non-EU supply chain disruptions.
- Most of the selected providers achieved SEAL-3 status under the new Cloud Sovereignty Framework, demonstrating high technological autonomy.
- The initiative establishes a benchmark for secure, compliant cloud adoption across the EU public sector.
The European Commission has taken a significant step toward strengthening the bloc’s digital autonomy by awarding new sovereign cloud contracts. Valued at up to €180 million over a period of six years, the contracts were awarded to four European providers following a rigorous evaluation process. This initiative is part of the Commission’s broader effort to reduce dependence on non-European technology and ensure that EU institutions can procure secure, compliant cloud services[^1][^7].
Awarded Providers and Strategic Procurement
To ensure diversification and avoid potential lock-in by a single provider, the Commission awarded contracts to four distinct entities[^1]. The selected providers include:
- A Luxembourgish-French partnership led by Post Telecom with OVHCloud and CleverCloud.
- The German company STACKIT (Schwarz Group).
- The French company Scaleway (Iliad Group).
- A Belgian-French-Luxembourgish partnership led by Proximus, utilizing services from S3NS—a joint venture between Thales and Google Cloud—as well as Clarence and Mistral[^1][^9].
The inclusion of a partnership leveraging Google Cloud technology has sparked some industry debate, highlighting the central tension in EU procurement regarding whether non-European technology can satisfy genuine digital sovereignty requirements[^3]. However, the Commission maintains that the technical environment for this partnership is exclusively operated by EU companies[^1].
The Cloud Sovereignty Framework
Central to this procurement is the Commission’s newly developed Cloud Sovereignty Framework. This tool translates the abstract concept of digital sovereignty into objective, measurable procurement criteria[^1]. The framework evaluates providers across eight concrete objectives, ranging from strategic, legal, and operational considerations to supply chain transparency, technological openness, security, and compliance with EU laws[^2][^7].
The framework introduces the Sovereignty Effectiveness Assurance Level (SEAL), a tiered scoring system that ranges from SEAL-0, indicating a complete lack of sovereignty, to SEAL-4, which requires a full EU supply chain from chips to software[^1]. To be considered eligible for the tender, providers were required to reach at least SEAL-2, a “Data Sovereignty” level ensuring compliance with EU laws without requiring additional technical measures by the customer[^1].
Most of the awarded providers—Post Telecom, STACKIT, and Scaleway—achieved SEAL-3, known as the “Digital Resilience” level. This designation implies that their services, technology, and operations are immune from supply chain disruption from non-EU third parties, largely because they develop their own European technology[^1]. The Proximus partnership achieved SEAL-2, demonstrating that even non-European technologies can meet the minimum level of sovereignty required when operated within a strict and appropriate framework[^1].
Market Context and Geopolitical Drivers
The push for cloud sovereignty is being accelerated by regulatory and geopolitical tensions. The US CLOUD Act of 2018 allows US authorities to compel American companies to produce data regardless of where it is stored, creating a direct conflict with the EU’s General Data Protection Regulation (GDPR)[^8]. Consequently, European enterprises, government agencies, and regulated industries are increasingly reevaluating their reliance on US-based hyperscalers like Amazon Web Services, Microsoft Azure, and Google Cloud[^8].
The sovereign cloud market is experiencing rapid growth as a result. According to industry projections, worldwide sovereign cloud spending is expected to reach $80 billion in 2026, with European spending growing 83% year-over-year[^8]. In response to these shifting market dynamics and regulatory demands, major US providers have also begun developing European sovereign cloud architectures with localized governance and EU-based operational teams to maintain compliance[^5].
Future Implications and Next Steps
The Commission’s successful introduction of sovereignty criteria into cloud procurement sets a benchmark for the public sector and establishes a clear standard for the industry[^2]. The Directorate-General for Digital Services has stated that it will continue to apply these sovereignty criteria to assess and enhance the digital services provided to its departments and other Union entities[^1].
Furthermore, the Commission plans to publish an updated version of the Sovereign Cloud Framework based on lessons learned from the tender process and encourages both public and private organizations to adopt the approach[^1][^2]. The push for digital sovereignty is also expected to expand legislatively. The proposed EU Cloud and AI Development Act (CADA), published in June 2026, aims to establish a comprehensive framework regulating cloud services in Europe, including an “open source first” procurement principle for public sector bodies[^10].
Conclusion
By successfully embedding sovereignty into its cloud procurement strategy, the European Commission is leading by example in advancing Europe’s digital sovereignty. The award of the €180 million sovereign cloud contracts not only proves that European providers can meet strict technical and sovereignty standards, but it also establishes a robust framework that will likely shape the future of secure, compliant digital infrastructure across the continent.
References
[^1]: “Commission advances cloud sovereignty through strategic procurement“. European Commission. Retrieved April 18, 2026.
[^2]: “Sovereign Cloud Framework explained“. European Commission. Retrieved April 18, 2026.
[^3]: “EU awards its €180 million sovereign cloud contract“. LinkedIn. Retrieved April 18, 2026.
[^4]: “Commission awards €180 million tender for sovereign cloud to four European providers“. LowEndTalk. Retrieved April 18, 2026.
[^6]: “The European Commission awarded a sovereign cloud procurement contract worth up to €180 million“. Facebook. Retrieved April 18, 2026.
[^8]: “EU Cloud Sovereignty: Why Businesses Are Moving Away from US Providers“. ASEE. Retrieved April 18, 2026.
[^9]: “First Commission tender for sovereign cloud“. Interoperable Europe. Retrieved April 18, 2026.
[^10]: “European Commission’s Proposed Cloud Sovereignty Framework Creates New Compliance Tiers for Software Providers“. Jones Day. Retrieved April 18, 2026.
