By EuropeanSwitch Editorial · 23 April 2026 · 9 min read
At a glance
On 17 April 2026 the European Commission awarded a €180 million, six-year sovereign cloud contract to four European providers — Post Telecom (Luxembourg), StackIT (Germany), Scaleway (France) and Proximus (Belgium). The deal is the clearest procurement signal yet that European institutions intend to source sovereign infrastructure from European companies. For buyers in regulated sectors, the contract also sets a reference benchmark for what “sovereign enough” now means in practice.
The European Commission’s decision on 17 April to hand a €180 million, six-year cloud contract to four European providers was, on its face, a procurement story. The Commission, Parliament and Council, plus their associated agencies, will procure cloud services over the next six years from four European providers. The total contract value is €180 million, roughly $213 million at the time of award.
Look past the numbers, though, and this is one of the clearest signals the Commission has ever sent about where European digital infrastructure procurement is heading.
Who was awarded, and why it matters
The four providers selected were Post Telecom from Luxembourg, StackIT from Germany, Scaleway from France, and Proximus from Belgium. Each one already features in the EuropeanSwitch provider directory, and each represents a different model of what sovereign European infrastructure can look like.
Scaleway is the most recognisable name internationally — a Paris-headquartered cloud provider under the Iliad group, offering serverless functions, managed Kubernetes, object storage and managed databases. Its architecture has been built for European data residency from the start rather than retrofitted for compliance.
StackIT is the cloud arm of Schwarz Gruppe, the parent company of Lidl and Kaufland. The group has committed roughly €11 billion to cloud and AI infrastructure, including a 200-megawatt facility near Berlin designed to house up to 100,000 GPUs. StackIT now positions itself as a hyperscaler — a label Europe has conspicuously lacked.
Post Telecom and Proximus are the two telecom-backed entries, reflecting a European pattern that differs from the US market: national telecoms acting as cloud providers, with the regulatory familiarity and infrastructure footprint that comes with decades of operating under European law.
The sovereignty-washing question
One detail drew immediate attention from European sovereignty advocates. Proximus’s contract involves S3NS, a joint venture between Google Cloud and Thales. The Commission addressed this head-on in its communication, stating that non-European technologies, when operated within a strict and appropriate framework, can meet the minimum level of sovereignty required.
This is a meaningful nuance. The Commission has drawn a line between sovereignty-by-construction — where the provider is European-owned, European-operated and outside the reach of non-European law — and sovereignty-by-framework, where non-European technology is operated under sufficient legal and operational guardrails to satisfy procurement requirements.
For buyers, this distinction matters. If your procurement criteria are focused primarily on GDPR compliance and data residency, a framework arrangement may suffice. If your criteria include immunity from the US CLOUD Act or FISA 702, it almost certainly will not. The Commission’s position is that both thresholds are legitimate; buyers must decide which they need.
What the contract does not do
The Commission was explicit that it is not trying to exclude US providers from European institutional procurement entirely. Amazon Web Services, Microsoft and Google continue to supply Commission services under existing arrangements. This is not a decoupling announcement.
What it is, instead, is a reference. For the first time, the Commission has documented — through a competitive procurement process — a set of providers that meet its own sovereignty threshold. Any European public sector buyer, regulated entity, or risk-sensitive corporate that wants to make a similar procurement decision now has a template to work from.
The procurement signal
For the organisations EuropeanSwitch serves — procurement teams, CIOs, compliance officers, information security leads — this contract has three practical implications.
First, it demonstrates that European providers at the level required for EU-institutional workloads do exist. That was genuinely contested in 2022 and 2023; it is not now. The Commission has effectively certified four, and the broader market contains dozens more.
Second, it establishes a procurement vocabulary. The Commission’s framework evaluates providers across eight sovereignty objectives including legal jurisdiction, operational control, technological openness, transparency and supply-chain integrity. Any organisation running a serious sovereign cloud evaluation should look at those eight objectives and adapt them to its own context.
Third, it changes the burden of proof. Until this contract, a CIO arguing for a European cloud migration could be pushed back with “but the Commission itself uses AWS.” That argument has now been neutralised for workloads where sovereignty is a material requirement.
The market context
The contract lands into a market that has been visibly repositioning for sovereignty for months. Deutsche Telekom launched T Cloud Public in February, positioning it as the first genuinely European hyperscaler alternative. OVHcloud, Exoscale, Hetzner and Aruba continue to expand their managed-service portfolios. The EU Data Act, in force since September 2025, requires all cloud providers operating in Europe to support switching and to block unlawful third-country data access.
Gartner now projects European sovereign cloud spending to grow 83% in 2026 from a 2025 base of €6.9 billion. That is a serious rate of expansion, even against the scale of US hyperscaler investment — AWS, Azure and Google Cloud are collectively investing around $600 billion in 2026 alone.
The gap will not close quickly. What the Commission’s contract signals, though, is that “quickly” is not what matters. What matters is that the procurement default is changing, and the direction is clear.
What buyers should take from this
If you are evaluating cloud providers for a regulated workload or a public-sector tender, the four awarded providers are now a credible reference set. The EuropeanSwitch directory includes detailed profiles for each, alongside another 200+ European cloud and infrastructure providers across IaaS, colocation, edge computing and sovereign platforms.
The broader lesson, though, is about procurement philosophy. The Commission did not look for the cheapest option, or the most feature-complete, or the one with the deepest US-integration stack. It looked for providers that could meet a defined sovereignty threshold and still deliver operationally. That framing — define the sovereignty floor first, then evaluate on capability — is the shift that is now spreading from institutional procurement into corporate procurement across Europe.
This article represents editorial commentary and does not constitute legal or regulatory advice.
EuropeanSwitch maps 4,900+ verified European technology providers, including cloud, infrastructure and sovereign platforms. Browse the directory to evaluate alternatives, or explore our European Alternatives guides to map direct replacements for the tools you use today.