Author: fo | heise.de
Source: [Original article](not available)
**Publication date: 31.10.2025 Summary reading time: 4 minutes

Core Topic & Context

The European Commission has presented a detailed assessment system for cloud services and announced a 180 million euro procurement initiative. The Cloud Sovereignty Framework is intended to help EU institutions select cloud services according to uniform sovereignty criteria and reduce dependence on non-European providers.

⚡ Three Critical Questions

❓ Question 1: Will US hyperscalers paradoxically become the main beneficiaries of the European sovereignty initiative through their established EU subsidiaries and resources?

❓ Question 2: How will the tension between technological dependence on non-EU hardware (CPUs, GPUs) and the claim to digital sovereignty be resolved?

❓ Question 3: Could the fragmentation of the global cloud market through regional sovereignty requirements lead to higher costs and reduced innovation?

🔮 Future Scenarios

📅 Short-term (1 year)

Intensive adaptation activities among cloud providers for SEAL certification
First tenders according to new criteria with possible preference for established US providers with EU subsidiaries
Increased compliance effort and documentation costs for all market participants

📅 Medium-term (5 years)

Emergence of a bifurcated cloud market: "sovereign" vs. global services
Possible consolidation of smaller European providers unable to meet sovereignty criteria
Development of specialized EU cloud services by US hyperscalers as separate business units

📅 Long-term (10-20 years)

Potential for genuine European cloud champions through continuous market support
Emergence of regional "internet blocks" with different sovereignty and security standards
Possible development of a fully European technology supply chain for critical infrastructures

Key Facts & Figures

180 million euros procurement volume for sovereign cloud services announced
8 sovereignty objectives defined, covering strategic, legal, operational and technological dimensions
SEAL system (Sovereign European Assurance Level) introduced as new ranking system
Framework applies immediately to EU institutions and agencies
Assessment covers entire supply chain including CPU, GPU and network hardware origin

Stakeholders & Affected Parties

Directly affected:

EU institutions and agencies (mandatory application)
Cloud providers of all sizes (certification requirements)
National authorities and private companies (optional use)

Industries: Public administration, IT services, telecommunications, critical infrastructures

Potential winners: US hyperscalers with strong EU structures, established European cloud providers Potential losers: Smaller EU providers without resources for compliance, non-EU providers without local structures

Opportunities & Risks

Opportunities:

Strengthening European digital sovereignty and independence
Market advantages for genuinely European providers through assessment of control structures
Standardization and transparency in cloud procurement

Risks:

Paradoxical strengthening of US hyperscalers through their superior compliance capabilities
Higher costs due to fragmented markets and additional certification efforts
Possible weakening of smaller European providers through high compliance hurdles

Action Relevance

For cloud providers: Immediate assessment of own services according to SEAL criteria and building corresponding documentation required.

For companies: Review of existing cloud strategies and integration of sovereignty criteria in tenders.

Time-critical: The framework can be applied now - early SEAL certifications could provide market advantages.

📋 Executive Summary

The new EU Cloud Sovereignty Framework establishes measurable criteria for digital sovereignty for the first time and announces 180 million euros in procurement volume. Paradoxically, however, US hyperscalers with established EU structures could become the main beneficiaries, while smaller European providers come under pressure due to high compliance requirements. The initiative marks an important step toward European digital sovereignty, but carries the risk of further market consolidation in favor of already established major providers.

✅ Fact Check

Procurement volume of 180 million euros confirmed
SEAL assessment system and 8 sovereignty objectives verified
Immediate applicability for EU institutions confirmed
[⚠️ To be verified] Exact details on harmonization with existing Cybersecurity Act certifications
[⚠️ To be verified] Concrete enforcement mechanisms and audit procedures