Europe turns sovereignty into buying rules

In Europe, “digital sovereignty” is turning into a buying rule, with cloud and artificial intelligence contracts now asking who controls the stack, where data sits, and who can audit it. (theregister.com) OpenText said on April 13 it had partnered with S3NS, the Thales and Google Cloud alliance, to offer a hybrid sovereign cloud architecture hosted in France for European customers. The company said the package is designed for sensitive workloads, strict data residency, and “secure artificial intelligence at scale.” (investors.opentext.com) OpenText also said it would make enterprise data and artificial intelligence products available through Amazon Web Services’ European Sovereign Cloud, giving customers a second route for regionally governed deployments. Its S3NS offer includes a dedicated private cloud for sensitive workloads and a sovereign software-as-a-service archive for SAP systems with European residency controls. (prnewswire.com) (stocktitan.net) The practical issue is control. European buyers increasingly want cloud services that keep regulated data under local governance while still using large providers’ computing and artificial intelligence tools for less sensitive work. (commission.europa.eu) (theregister.com) Brussels has already written that preference into procurement. On October 10, 2025, the European Commission launched a tender worth up to 180 million euros for sovereign cloud services and said its Cloud Sovereignty Framework would be used as a reference point for providers, especially in the public sector. (commission.europa.eu) That framework scores providers on strategic, legal, operational, and technical control, rather than just on price or raw computing capacity. The Commission said the tender was expected to be awarded between December 2025 and February 2026, showing that sovereignty tests are moving from policy papers into contract terms. (interoperable-europe.ec.europa.eu) (commission.europa.eu) France has pushed the same logic through SecNumCloud, a national qualification for cloud providers handling sensitive workloads. Thales says S3NS’ trusted cloud is built to meet SecNumCloud 3.2, and S3NS said in December 2025 that its PREMI3NS offering had received that qualification from the French cyber agency, the National Agency for the Security of Information Systems. (thalesgroup.com) (finance.yahoo.com) The debate is no longer limited to France or Brussels. IBM Asia Pacific general manager Hans Dekkers told The Hindu BusinessLine that data sovereignty is becoming a growth driver, as companies look for domain-specific artificial intelligence models and local control over sensitive information. (thehindubusinessline.com) Industry groups are now treating sovereignty as an engineering problem as much as a legal one. Open Sovereign Cloud Day was held on March 23 in Amsterdam alongside KubeCon and CloudNativeCon Europe 2026, with organizers framing digital sovereignty as a practical priority for cloud-native infrastructure. (events.linuxfoundation.org) (cncf.io) The result is a narrower sales pitch for cloud and artificial intelligence vendors in Europe. It is no longer enough to promise scale and features; vendors are increasingly being asked to prove local governance, legal insulation, and auditability before they get on the shortlist. (theregister.com) (commission.europa.eu)