Kyndryl to Acquire Dutch Cloud Provider Solvinity

Why It Matters

The conflict jeopardizes data privacy and regulatory compliance while eroding Europe’s strategic autonomy in the digital economy. Without decisive action, reliance on U.S. hyperscalers could expose critical services to foreign legal reach.

Key Takeaways

• 90% of EU cloud services owned by US firms
• CLOUD Act overrides EU GDPR contracts on data access
• Austria migrated 1,200 staff to Nextcloud for sovereignty
• EU procurement favors open market, limiting local providers
• Eurostack plan: buy, build, fund European digital infrastructure

Pulse Analysis

Europe’s digital backbone is dominated by American hyperscalers, with roughly nine out of ten cloud workloads on U.S. infrastructure. The 2018 CLOUD Act gives U.S. authorities power to demand data from any American‑owned service, regardless of server location, directly contravening the GDPR’s strict data‑protection regime. This extraterritorial reach creates a legal paradox for European organisations: contractual guarantees of data residency are nullified by a foreign subpoena, often accompanied by gag orders that prevent disclosure. Consequently, data‑protection impact assessments increasingly flag the CLOUD Act as an unacceptable risk, pushing public entities toward alternatives.

Austria’s Federal Ministry for Economy completed a four‑month migration of 1,200 staff to the open‑source Nextcloud suite, showing that a sovereign stack can be deployed quickly and cheaper than Microsoft’s offering. The success inspired similar projects in Germany’s Schleswig‑Holstein, France’s NUBO private‑cloud, and the International Criminal Court’s switch to the OpenDesk suite, indicating a growing appetite for European‑hosted tools. Yet the market remains fragile: the recent acquisition of Dutch provider Solvinity by U.S.-based Kyndryl demonstrates how champions can be subsumed, re‑exposing critical services to American legal authority. These cases underline both migration feasibility and systemic risk of unchecked foreign ownership.

Analysts argue that piecemeal compliance cannot replace a coordinated industrial policy. The Eurostack Foundation proposes a three‑pillar approach—prioritising European suppliers in public procurement, catalysing private‑sector investment to build home‑grown cloud and collaboration platforms, and creating a dedicated fund to scale these solutions continent‑wide. Such a strategy would turn current dependency into a resilient ecosystem, limiting U.S. hyperscaler leverage while preserving interoperability with global partners. If Europe aligns policy, capital, and technical expertise, the next decade could shift from 90 % foreign cloud usage to a balanced market where European providers hold a meaningful share of critical infrastructure.

Deal Summary

In November 2025, American IT services firm Kyndryl announced its intention to acquire Solvinity, a Dutch managed‑cloud provider that runs critical national infrastructure. The deal raises concerns about European digital sovereignty as a local provider becomes owned by a US‑based company.