AI & TechBigTech CompaniesBusinessNewswireTechnology

EU Secures €180M Sovereign Cloud Contract

▼ Summary

– The European Commission awarded its €180 million sovereign cloud tender to four European provider groups for a six-year contract.
– The most significant aspect is the inclusion of the Proximus consortium, which uses Google Cloud technology, showing non-European tech can qualify under strict governance.
– The Commission structured the award to four groups to ensure diversification and avoid reliance on a single provider.
– Winners were assessed against a framework measuring sovereignty across eight objectives, including legal, operational, and security criteria.
– The tender acts as a template, with the Commission finalizing an updated Cloud Sovereignty Framework for others to reuse.

The European Commission has finalized a major €180 million framework contract for sovereign cloud services, selecting four European provider groups after a procurement process initiated last October. This six-year agreement enables all EU institutions and agencies to source cloud infrastructure that meets stringent new standards for strategic autonomy and data control. The winning consortia are Post Telecom with CleverCloud and OVHcloud, StackIT, Scaleway, and a group led by Proximus that includes the S3NS joint venture between Thales and Google Cloud, alongside Clarence and Mistral AI.

Awarding four parallel contracts was a strategic choice by the Commission to ensure diversification and resilience in its cloud supply chain, preventing over-dependence on any single vendor. Each provider was rigorously evaluated against the Commission’s Cloud Sovereignty Framework, which scores offerings across eight objectives spanning legal jurisdiction, operational control, supply chain transparency, technological openness, and environmental impact.

The most notable outcome is the qualification of the Proximus-led consortium, as S3NS relies on infrastructure technology from American-owned Google Cloud. This sets a crucial precedent, demonstrating the Commission’s view that non-European technologies can satisfy sovereignty requirements when governed within a sufficiently strict operational framework. In its announcement, the Commission explicitly stated that such technologies, under appropriate controls, can meet the required minimum level of sovereignty. This effectively distinguishes between sovereign ‘operation’ and sovereign ‘technology’, suggesting robust governance can compensate for non-European ownership.

This outcome aligns with pre-award concerns voiced by CISPE, the European cloud industry association, which warned the framework’s scoring methodology could allow this very result. The other three winning groups are fully European-owned. Post Telecom, Luxembourg’s state-owned operator, is bolstered by French partners CleverCloud and OVHcloud. OVHcloud, already a Commission contractor, was also recently selected as a subcontractor for the ECB’s digital euro project. StackIT is the cloud brand of Germany’s Schwarz Group, built by its technology arm Schwarz Digits. Scaleway, part of the Iliad Group, has established itself as a leading European sovereign cloud provider with infrastructure geared for AI workloads, counting Mistral AI among its clients.

The Commission positions this tender as both a validation of European capability and a template for future procurement. It stated the result highlights the high quality of European providers and that it is finalizing an updated version of its sovereignty framework for member states to reuse. This effort runs parallel to a broader Tech Sovereignty package under development, which will include the Cloud and AI Development Act (CADA), a new Open Source strategy, Chips Act 2, and a digital roadmap for energy and AI.

The impending CADA is particularly significant, as it aims to harmonize the definition of ‘sovereign cloud’ across the EU single market. Industry debate continues over whether it will establish criteria that exclude US hyperscalers from public contracts or accommodate compliant-operation models like the Proximus-S3NS structure. This legislative push occurs against an acute market backdrop where US providers like AWS, Microsoft Azure, and Google Cloud hold approximately 70% of the European cloud infrastructure market, compared to about 15% for European players.

A key driver for this policy is the persistent legal tension created by the US CLOUD Act, which can compel American firms to disclose data stored overseas. The Commission’s framework attempts to operationalize a practical response to this challenge. However, critics have argued that by weighting legal jurisdiction as only 10% of the total sovereignty score, the framework may allow well-resourced non-EU providers to qualify despite potential shortcomings on this fundamental criterion.

(Source: The Next Web)

Topics

sovereign cloud award 100% winning consortia 95% non-european technology inclusion 93% cloud sovereignty framework 92% diversification strategy 88% european cloud providers 87% sovereign operation vs technology 86% cispe criticism 84% tech sovereignty package 83% cloud and ai development act 82%