5 min Reading Time
Digital sovereignty long served as a political buzzword devoid of technical substance. In 2025, that changed. Operational sovereign cloud offerings, regulatory tailwinds from the EU Data Act and AI Act, and a growing number of German companies deliberately shaping their cloud strategies along European lines – the demand has crystallized into a real market.
TL;DR
- 51 percent of German companies report strong dependence on US imports of digital technologies – an increase of ten percentage points since early 2025 (Bitkom, 2025).
- GAIA-X has evolved from a paper tiger into a functioning quality seal: several hundred cloud services are now undergoing GAIA-X certification.
- The European cloud market is growing by 24 percent in 2025 (Synergy Research) – yet European providers are benefiting disproportionately from the sovereignty trend.
- SAP, T-Systems, and IONOS have each built their own sovereign cloud stacks, fully operational without reliance on US hyperscalers.
- Starting in 2026, the EU Data Act and AI Act will establish a regulatory framework that, for the first time, structurally advantages European cloud providers.
German companies’ dependence on US cloud providers is well documented: AWS, Microsoft Azure, and Google Cloud collectively control around 70 percent of the European cloud market. Less widely known: European providers hold roughly 15 percent market share – stable since 2022, but gaining traction amid rising sovereign cloud demand (Synergy Research).
The driver here isn’t protectionism – it’s pragmatism. Companies in regulated sectors – finance, healthcare, public administration – require infrastructure demonstrably subject to European law. Not as a “nice-to-have,” but as a hard compliance requirement.
GAIA-X: From Paper Tiger to Quality Seal
GAIA-X’s story is one of overblown expectations – and quiet course correction. Announced in 2019 as a Franco-German alternative to hyperscalers, the project quickly became synonymous with European technological ambition unmoored from delivery capability. Twenty-two working groups, 300 members, zero usable products – that was the tally as recently as mid-2023.
Since then, something pivotal shifted: GAIA-X stopped trying to build a cloud and started defining standards. Its GAIA-X Digital Clearing House (GXDCH) architecture now certifies cloud services against defined criteria for data sovereignty, transparency, and interoperability. Over 350 services carry the label – spanning storage solutions, container platforms, and AI development environments.
Sovereign Cloud: Three German Providers Delivering Today
Alongside GAIA-X, German companies have built sovereign cloud stacks already running in production:
T-Systems Open Telekom Cloud: The Deutsche Telekom subsidiary has operated European cloud infrastructure based on OpenStack since 2016. In 2024, T-Systems took a further step with “Sovereign Cloud powered by Google Cloud”: Google technology, operated in German data centers under German data sovereignty. Over 4,000 customers use the platform, including several federal agencies.
SAP Sovereign Cloud: SAP’s offering targets enterprises seeking to run S/4HANA and Business Technology Platform (BTP) in a fully EU-controlled environment. Data never leaves the European legal jurisdiction; access is managed exclusively by EU-based personnel who have undergone security vetting. Since its 2023 launch, over 200 customers have migrated. Those seeking GPU clusters and AI infrastructure Made in Germany will find an expanding ecosystem.
IONOS Cloud: As a subsidiary of United Internet, IONOS operates data centers exclusively in Germany and Spain. Its proprietary cloud platform delivers compute, storage, and Kubernetes – fully GDPR-compliant and free of US technology dependencies in the stack. Revenue grew by approximately ten percent in 2024 to €1.56 billion.
Regulatory Tailwind
Two EU laws are fundamentally reshaping cloud market competition in 2025/26:
The EU Data Act, fully applicable since September 2025, mandates cloud providers – for the first time – to guarantee data portability and seamless provider switching. For enterprises, this means migrating from a hyperscaler to a European provider becomes significantly easier – both technically and contractually. Switching costs – previously the strongest lock-in tool wielded by the “Big Three” – are losing their grip. Companies building a multi-cloud strategy with a European foundation benefit directly.
The AI Act classifies certain AI applications as high-risk and demands demonstrable control over training data and models. Companies running such applications on US cloud infrastructure face a documentation challenge: How do they prove no third-country access is possible? European sovereign clouds offer a structural advantage here.
“The question is no longer whether cloud sovereignty will become relevant – but how quickly companies align their architectures accordingly.”
Frequently Asked Questions
Is GAIA-X an alternative to AWS or Azure?
No. GAIA-X is not a cloud provider – it’s a framework governing sovereign cloud services. It certifies existing providers against criteria like data sovereignty and interoperability. Companies such as T-Systems or IONOS deliver the actual infrastructure.
Do sovereign clouds match hyperscalers technically?
Yes – in most enterprise scenarios. Gaps remain for highly specialized AI workloads or global content delivery. The pragmatic approach today is hybrid: sovereign infrastructure for regulated workloads, hyperscalers for everything else.
What does migrating to a sovereign cloud cost?
Migration costs vary widely. For a typical mid-sized SAP landscape, consultants estimate 6-12 months of migration time and ongoing operational costs 15-25 percent higher than with a hyperscaler. However, the EU Data Act significantly lowers switching costs.
Further Reading
- Multi-Cloud Strategy 2026: Exit Lock-in, Enter Flexibility – cloudmagazin
- AI Infrastructure Made in Germany: GPU Clusters, Sovereign AI – cloudmagazin
- FinOps Revolution: Getting Cloud Costs Under Control – cloudmagazin
More from the MBF Media Network
- Digital State: Germany’s Public Administration in the 21st Century – MyBusinessFuture
- EU AI Act 2026: What Companies Must Implement Now – Digital Chiefs
- Cybersecurity Trends 2026: 7 Developments – SecurityToday
Header Image Source: Pexels / Manuel Geissinger
