EC selects four cloud vendors to enhance EU digital sovereignty

2026-04-20 · Source: Tech Monitor · Field: Government & Public Sector — Digital Government & E-Government, Public Policy & Governance, Regulatory & Compliance · Depth: Intermediate, quick

Summary

The European Commission (EC) has awarded a €180 million sovereign cloud contract to four European firms: Post Telecom (with CleverCloud and OVHcloud), STACKIT, Scaleway, and Proximus (with S3NS, Clarence, and Mistral). This multi-year, multi-provider arrangement, granted under the Cloud III Dynamic Purchasing System (DPS) launched in February 2024, aims to enhance EU digital autonomy and serve all EU institutions for the next six years. The procurement process emphasized infrastructure redundancy and resilience, evaluating vendors against an eight-objective Cloud Sovereignty Framework covering strategic, legal, operational, environmental, security, compliance, technological openness, and supply chain transparency criteria. This initiative seeks to standardize minimum sovereignty assurance levels for cloud services and encourages compliance with European standards and values, even allowing non-European technologies under strict frameworks.

Key takeaway

For CTOs and VPs of Engineering evaluating cloud infrastructure, the EC's approach demonstrates a robust model for achieving digital sovereignty and resilience. You should consider adopting multi-vendor strategies and developing comprehensive sovereignty frameworks that encompass legal, operational, and supply chain criteria to mitigate external influence and ensure compliance within your own organizational context.

Key insights

The EC's multi-vendor sovereign cloud strategy prioritizes digital autonomy, resilience, and adherence to European standards.

Principles

• Digital autonomy requires multi-vendor redundancy.
• Sovereignty frameworks guide compliance and security.
• Non-EU tech can be sovereign under strict controls.

Method

The Cloud III DPS facilitates targeted mini-competitions for multi-tenant IaaS/PaaS, evaluating providers against an eight-objective Cloud Sovereignty Framework to ensure compliance and resilience.

In practice

• Implement multi-vendor cloud strategies for resilience.
• Develop sovereignty frameworks for vendor evaluation.
• Integrate sovereignty criteria into digital service procurement.

Topics

• EU Digital Sovereignty
• Cloud III DPS
• Cloud Sovereignty Framework
• European Cloud Providers
• Tech Sovereignty Package

Best for: CTO, VP of Engineering/Data, Executive, IT Professional, Policy Maker, Legal Professional

Related on AIssential

• Why Europe Wants Its Own AWS & Are We Headed Toward Multiple Internets? — Regions are pursuing sovereign cloud solutions to address data privacy, encryption, and vendor control concerns, potentially fragmenting the internet.
• What the EU’s new Sovereignty Package means for European tech — The EU's Tech Sovereignty Package aims to reduce reliance on foreign tech by boosting domestic AI and cloud infrastructure.
• France's Silver Linings Sovereignty Playbook: Notre Dame Policy, Electrification, Data Centers & More More More! — Europe is re-industrializing to enhance resilience and sovereignty across critical sectors, reducing foreign dependencies.
• How can businesses make sovereign cloud a reality? — Sovereign cloud demands a "sovereign-by-design" strategy encompassing data, operational, and technology controls, not just data location.
• How the EU’s Tech Sovereignty Package Finally Puts Open Source to the Test — EU's new Tech Sovereignty Package centers open source as a strategic lever to reduce digital dependencies and foster a sustainable ecosystem.
• EU aims to ensure foreign governments or firms cannot disrupt tech services with ‘kill switch’ — The EU seeks technological sovereignty to mitigate foreign control over critical digital infrastructure and data.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Tech Monitor.