Europe wants to regain control over its digital future. But in a world where infrastructure, software, and data depend on global technology providers, what does sovereignty really mean?
According to a study conducted by Asterès for Cigref, US companies accounted for 83% of European business spending on cloud and software services in 2024.
This concentration goes beyond economics. It raises questions about Europe's ability to manage dependencies, control costs, and preserve its technological choices.
The question is no longer simply where our data resides, but who ultimately controls the technologies we depend on.
Hosting Data in Europe Is Not Enough
Data residency provides an important first layer of assurance. But it does not address every dimension of digital sovereignty.
A datacenter located in Europe may still rely on technologies, software, or providers subject to foreign jurisdictions.
The resulting risks include data access, service continuity, infrastructure control, and the ability to migrate away from existing providers.
In France, ANSSI's SecNumCloud framework addresses some of these concerns, notably through requirements designed to protect against risks arising from extraterritorial legislation.
But sovereignty cannot be reduced to a certification or a geographical location.
Controlling data matters. Controlling the conditions under which it is processed and operated matters just as much.
Europe Is Seeking to Regain the Initiative
On June 3, 2026, the European Commission presented a package of measures designed to strengthen the continent's technological autonomy.
Among them, the proposed Cloud and AI Development Act aims to expand European computing and datacenter capacity, support innovation, and establish a common framework for assessing cloud and AI sovereignty.
The broader strategy also addresses semiconductors and open source, both essential to technological autonomy.
Yet this ambition raises a fundamental challenge: how can Europe build credible alternatives while continuing to benefit from the global technology ecosystem?
Europe's challenge is not solely industrial capacity. It must also create the economic, technological, and commercial conditions for its solutions to succeed over time.
Independence cannot simply be declared. It must be built through investment, innovation, and competitiveness.
For Businesses, the Real Priority Is Resilience
In a June 2026 position paper, Cigref highlighted an important distinction: sovereignty is primarily a responsibility of public authorities, while businesses must focus on strengthening their digital resilience.
This perspective deserves attention.
For organizations, the challenge is to maintain operations, protect critical information, and preserve flexibility in the face of technological, contractual, or geopolitical change.
This requires questioning cloud strategies and vendor commitments:
- Dependency: can we continue operating if a provider changes its terms or disrupts a service?
- Exit readiness: can we realistically migrate our data, applications, and operations?
- Control: do we fully understand the legal, financial, and technical implications of our technology choices?
Digital sovereignty should not become another marketing claim. It should encourage practical assessments of risk and operational resilience.
Making Autonomy a Strategic Choice
At KAIRUN OFFICE, we believe the answer is not to systematically oppose European cloud providers and international technology companies.
It requires an approach proportionate to business needs and risks.
Three priorities stand out:
- Classify requirements: align security, data residency, and autonomy requirements with data sensitivity and service criticality.
- Manage dependencies: consider exit costs, architecture, contractual commitments, and portability from the earliest investment decisions.
- Govern over time: integrate technology and vendor risks into program governance and transformation roadmaps.
The goal is not absolute independence, which is often unrealistic, but the ability to make informed decisions and adapt when circumstances change.
Conclusion: Sovereignty as Freedom of Choice
Europe's digital future will depend both on its ability to develop its own technologies and on the capacity of its organizations to manage their dependencies.
Regulation, investment, and innovation are essential. But they must be supported by coherent operational strategies, effective governance, and credible exit capabilities.
Digital sovereignty is not the absence of dependencies. It is the collective ability to understand and manage them, and prevent them from becoming irreversible.
One question therefore deserves attention:
"Will the technology choices we make today still allow us to choose freely tomorrow?"
KAIRUN OFFICE - Insights & Perspectives, October 2026.
References
European Commission: Strengthening Europe's Tech Sovereignty(new tab)
European Commission: Cloud and AI Development Act(new tab)