Data Is a Sovereignty Issue. And Broader than Just the Hyperscalers

Why It Matters

Sovereign data controls dictate regulatory compliance, national security, and competitive advantage for governments and enterprises across Europe and the UK.

Key Takeaways

• UK reliance on US hyperscalers raises data sovereignty risks
• Microsoft lags behind AWS and Google in sovereign cloud delivery
• Google’s S3NS offers air‑gapped French cloud, winning £400 m contracts
• Sovereign cloud strategies split into three maturity levels across providers
• Hybrid, partner‑led models may become the future of European cloud

Pulse Analysis

The rise of digital sovereignty has reshaped the cloud landscape. After the Schrems II ruling forced tighter limits on cross‑border data flows, European regulators and ministries are demanding that only domestic law governs sovereign data. This shift reverses the pre‑cloud era when on‑premise data centres kept information physically within national borders, and it forces cloud providers to redesign architectures that were once globally uniform.

Providers are racing to meet these new expectations, but progress is uneven. Microsoft’s attempts to retrofit Azure for in‑country use have stumbled, evident in delayed AI‑inference commitments and opaque data‑flow disclosures. AWS has introduced a European Sovereign Cloud that remains region‑based, leaving questions about US Cloud Act exposure. Google, by contrast, has partnered with Thales to launch S3NS, an air‑gapped French offering that secured a £400 m (≈ $508 m) five‑year contract for defense and NATO customers, demonstrating that high‑cost, isolated solutions can win strategic deals.

Looking ahead, the market is likely to coalesce around hybrid, partnership‑driven models. Governments will favor procurement frameworks that guarantee portability, multi‑vendor interoperability, and clear jurisdictional control. This environment creates opportunities for regional cloud players and for large hyperscalers to collaborate with local partners, delivering “hyper‑core” services under national oversight. Policymakers who embed these principles into procurement will not only safeguard data but also stimulate a more resilient, competitive European cloud ecosystem.