Digital Sovereignty: Europe Marches – Switzerland Finds Its Stride

Blog (EN)

clarus.news | Analysis | July 20, 2026

by Andreas Binggeli and Ernst Anker

Seven months after the 10-million coup in the Federal Palace, the army draws its first consequence: Cyber Command will replace Microsoft 365 with the open-source solution openDesk by October. Meanwhile, the Council of States demands an impulse program – again against the Federal Council's will. France is implementing its April Linux directive through industrial alliances. The EU Commission presented a complete sovereignty package in June. And Germany exports software whose benefits it barely realizes itself. A status assessment.

Switzerland: From Report to First Marching Orders

The Swiss debate has had an official framework since November 2025. On November 26, the Federal Council adopted the report "Digital Sovereignty of Switzerland" in fulfillment of postulate 22.4411 Z'graggen. It defines digital sovereignty as "the state's ability to control and act in the digital space." Autarky is explicitly not the goal. An interdepartmental working group led by the DDPS (SEPOS), together with the Federal Chancellery and FDFA, is to identify risks and propose measures. These also include instruments under international law to protect official data from foreign state access.

The Digital Switzerland Strategy 2026 elevates digital sovereignty to a focus topic – alongside e-ID and digital host state. So much for the paper trail.

Parliament wants more. On June 10, 2026, the Council of States adopted motion 26.3221 Z'graggen for an impulse program to strengthen digital sovereignty – with 30 to 7 votes. It calls for startup financing for pilot projects in digital infrastructures, open source, cybersecurity, and AI. The Federal Council recommended rejection. Federal President Guy Parmelin referred to ongoing work and the tight financial situation. The pattern is familiar: Parliament had already pushed through the 10-million credit for an army Microsoft alternative against the Federal Council in December 2025.

This very credit is now bearing first fruits. As the "Republik" made public on July 9 and the Federal Chancellery confirmed, Cyber Command will completely replace Microsoft 365 with openDesk by October 2026. The collaboration platform comes from the German Center for Digital Sovereignty (ZenDiS). The trigger remains former army chief Thomas Süssli's finding: Classified documents must not go into the Microsoft cloud, as the Cloud Act allows US authorities data access. National Councilor Gerhard Andrey commented to "Republik": "I'm very pleased that the army shows: It can be done."

The contrast to civilian administration remains stark. Around 40,000 federal workplaces have just been migrated to the new Microsoft 365 version. Federal Chancellor Viktor Rossi explained at the Swiss Cyber Security Days in February that a complete departure from Microsoft is hardly realistic. However, critical systems must be brought under own control. The Swiss Government Cloud (implementation 2025 to 2032) should provide the foundation for this. However, the SFAO criticized at the end of 2025 that the overall economic benefit had not yet been demonstrated. And the data protection conference privatim adopted a resolution in November 2025 that reads as a de facto ban on hyperscalers in administration.

France: From Directive to Alliance

France has not let up since the DINUM directive of April 8, 2026. All ministries must submit migration plans by autumn 2026 – across the entire stack: operating systems, collaboration tools, antivirus software, AI, databases, virtualization, and network technology. Around 2.5 million employees are affected. DINUM itself is switching from Windows to Linux.

What has changed since then? Three things. First, the market dimension: The first "rencontres industrielles du numérique" took place in June. A public-private alliance for European sovereignty is to emerge there – from antivirus solutions to AI platforms. The state acts as a demand bundler, not just a regulator. Second, the reference architecture: DINUM officially names the Gendarmerie with its over 100,000 Linux computers as the governance model for the national rollout. France is thus scaling a documented success, not an experiment. Third, honesty about limitations: The most difficult phase is considered to be replacing specialized applications in health, defense, and financial supervision that only run under Windows.

The contradictions remain. The Ministry of Education extended its Microsoft framework contract worth 152 million euros until 2029. And the European Data Protection Supervisor had already criticized the EU institutions' use of Microsoft 365 – the Commission made improvements. But the structural difference to Switzerland still applies: France has a central authority with deadline-setting competence.

Germany: Weak Diagnosis, Strong Export

For Germany, the external diagnosis is sobering. Forrester's first Global Sovereignty Forecast sees the country's technological sovereignty rising only from 34 to 36 percent by 2030. China reaches 82 percent, the USA 79 percent.

At the same time, Germany delivers the currently most successful export product of the European sovereignty movement: openDesk. The fact that the Swiss Army of all organizations relies on it is perhaps the best reference for ZenDiS. Schleswig-Holstein had migrated around 80 percent of its 30,000 workplaces to Linux and LibreOffice by early 2026. Media reports put annual license savings at 15 to 16.5 million euros. At the federal level, open source has been the default for new developments in procurement law since March 2026, according to industry reports. The gap between state pioneers and sluggish federal IT nevertheless remains Germany's core problem.

Denmark, Austria, Estonia: The Breadth of the Movement

Denmark is pursuing the pragmatic path. After the Digital Ministry's Microsoft exit (announced June 2025), Statens IT handed over the first Microsoft-free government PC to the road traffic authority on December 15, 2025. The pilot project with around 600 employees on Linux and LibreOffice started in spring 2026. According to government targets, up to 15,000 civil servants should be converted by the end of 2026. Copenhagen and Aarhus have also initiated corresponding steps.

Austria's armed forces are migrating to LibreOffice. Estonia plans, according to media reports, a pilot test for autumn 2026 for an IT infrastructure entirely without US providers; 15,000 workplaces should follow in two years. The Netherlands, Finland, and Belgium are reportedly withdrawing sensitive data from US cloud services. The trend is no longer an isolated act but a movement.

Europe Coordinates – With Built-in Contradiction

Coordination has taken institutional form since November 2025. At the Summit on European Digital Sovereignty in Berlin (November 18), Germany and France gathered digital ministers from 23 states and over 900 participants. A "Declaration for European Digital Sovereignty" was signed. Berlin and Paris established a joint taskforce: It should define what a "European digital service" is and develop sovereignty indicators for cloud, AI, and cybersecurity. The results will be presented at the Franco-German Council of Ministers 2026. At VivaTech in June, both countries already presented a joint definition of digital sovereignty.

On June 3, 2026, Brussels followed with the European Tech Sovereignty Package: Chips Act 2.0, a Cloud and AI Development Act, and its own open-source strategy. The Commission puts annual European spending on non-European digital products at over 260 billion euros. The strategy aims to expand open-source alternatives and promote their use in administrations. Critics like netzpolitik.org note: Nothing of this is legally binding yet. Whether the announced procurement law reform will change that remains open.

The built-in contradiction: The same governments that invoke sovereignty demand postponement of the AI Act's high-risk provisions by twelve months and GDPR relaxations in the Digital Omnibus. Sovereignty and deregulation run in the same package – not always in the same direction.

And Switzerland? It was not at the table in Berlin and is not covered by the EU package. Connection happens from below: The army uses German software, the EMBAG requires source code disclosure, the language model Apertus from the Swiss AI Initiative provides its own AI building block. The network "Sovereign Digital Switzerland," founded in July 2025, now counts over 200 organizations. Since 2017, more than 40 motions on digital sovereignty have been submitted at all state levels in this country. The will is there. Executive competence – as our analysis of the army's NDP project showed – remains the open flank.

Conclusion: Parliament as Sovereignty Engine

The balance after seven months: France executes with deadlines, Germany exports despite weak own record, Denmark provides practical proof on a small scale, the EU builds the framework. Switzerland has defined, reported – and one first real implementation: Cyber Command.

It's remarkable who is driving in Bern. Twice within six months, Parliament has overruled the Federal Council: on the army credit in December, on the impulse program in June. The Federal Council relies on "controlled dependence," working groups, and the Swiss Government Cloud. Parliament relies on startup financing and implementation. France shows that both belong together: Definitions without deadlines remain paper. The army has provided proof that it works. The question now is when the 40,000 civilian federal workplaces will follow – and who will set the deadline.

Key Points

  • Army's Cyber Command replaces Microsoft 365 with openDesk by October 2026 – first concrete implementation of Swiss sovereignty policy.
  • Council of States decided on June 10, 2026, on an impulse program for digital sovereignty (30:7) – again against the Federal Council's recommendation.
  • France implements its April directive: roadmap obligation by autumn 2026, industrial alliances since June, Gendarmerie as governance model.
  • EU Commission presented Tech Sovereignty Package on June 3, 2026 (Chips Act 2.0, Cloud and AI Development Act, open-source strategy); not yet legally binding.
  • Germany and France coordinate via taskforce and joint sovereignty definition; Denmark, Austria, and Estonia broaden the movement.
  • Switzerland is not institutionally integrated but factually docks on – via openDesk, EMBAG, and Apertus.

Critical Questions

  1. Evidence: The Forrester Index and the EU Commission's 260-billion estimate are based on their own methodologies. How transparent and independently verifiable are the weighting and data basis?
  2. Evidence: The Federal Council attests the administration has a "good overview" of its digital resources. What independent review supports this self-assessment?
  3. Conflicts of Interest: Service providers and associations (ZenDiS, Network SDS, open-source companies) directly benefit from the sovereignty discourse. How is their influence on procurement decisions made transparent?
  4. Conflicts of Interest: The Federal Chancellery concluded the Microsoft 365 contract and now accompanies the army's openDesk migration. How does it handle this role conflict?
  5. Causality: Do Office migrations actually lead to more sovereignty – or does dependence just shift to specialized applications, hardware, and chips, where Europe remains weak?
  6. Causality: Would international legal protection of official data (state immunity) be more effective than technical migrations – or are both absolutely necessary?
  7. Feasibility: Cyber Command counts IT-savvy specialists. Can the October timeline be transferred to the broad federal administration with 40,000 workplaces?
  8. Risks: The Federal Council rejected the impulse program for savings reasons. What does non-implementation cost – for example, in license costs, lock-in, and crisis resilience?

Source Directory

Own Contributions:

  • clarus.news: "France's Digital Sovereignty: From Strategy to Concrete Implementation," 13.04.2026
  • clarus.news: "Sovereignty: Germany Continues to Lag Behind in Technological Independence," 19.07.2026
  • clarus.news: "Digital Sovereignty: France Tackles the Bigger Box," 14.04.2026

Switzerland:

  • Federal Council: Report "Digital Sovereignty of Switzerland" (Postulate 22.4411), 26.11.2025 – admin.ch ✓
  • Federal Chancellery: Digital Switzerland Strategy 2026, 12.12.2025 – news.admin.ch / digital.swiss ✓
  • Motion 26.3221 Z'graggen "Impulse Program to Strengthen Digital Sovereignty" – parlament.ch; Council of States adoption 10.06.2026: inside-it.ch, netzwoche.ch, itmagazine.ch ✓
  • Republik: "Federal Cyber Specialists Turn Their Backs on Microsoft," 09.07.2026 ✓
  • Blick: "Cyber Command Retires Microsoft," 16.07.2026 ✓ | Netzwoche, 13.07.2026 ✓
  • SFAO: Audit Key Project Swiss Government Cloud (Business Case), Dec. 2025 ✓
  • MQ: Review Swiss Cyber Security Days 2026 (Keynote Rossi), Feb. 2026 ✓ (Single source, conference report)
  • Bär & Karrer: Briefing Cloud Use and Digital Sovereignty (privatim resolution), 16.04.2026 ✓
  • Netzwoche: "Digital Sovereignty Begins with Transparency" (Stürmer, Network SDS), 12.06.2026 ✓

France:

  • heise online: "France's Plan: Away from Windows, Toward Linux," 10.04.2026 ✓
  • Vergabeblog: "France's Linux Offensive," 16.04.2026 ✓
  • Martin Cid Magazine / borncity (Gendarmerie as model, specialized applications), April 2026 ✓

Germany / Other Countries:

  • heise: Forrester Global Sovereignty Forecast (via clarus analysis) ✓
  • borncity / Martin Cid: Schleswig-Holstein, approx. 80% of 30,000 workplaces migrated ✓
  • securecloud.de blog: "Microsoft Exit: Denmark Shows the Pragmatic Way" (with reference to DR, Ingeniøren, heise), 15.05.2026 ✓
  • heise / The Record: Danish Digital Ministry leaves Microsoft, June 2025 ✓
  • it-boltwise: Austria (Armed Forces), Estonia (Pilot Autumn 2026) – Single source, with attribution ✓

Europe:

  • BMDS / Federal Government / Élysée: Summit on European Digital Sovereignty, 18.11.2025 (Declaration, Taskforce, AI Act Moratorium, Digital Omnibus) ✓
  • BMDS: Joint German-French Definition of Digital Sovereignty, 17.06.2026 ✓
  • European Commission: European Tech Sovereignty Package (Chips Act 2.0, CADA, Open Source Strategy), 03.06.2026 ✓
  • netzpolitik.org: "New Tones from Brussels," 08.06.2026 ✓ | Table.Briefings, 14.06.2026 ✓

Verification Status: ✓ 19.07.2026 (Web search and source verification; single sources are marked)

This text was created with the support of an AI model. Editorial responsibility: clarus.news | Fact-checking: 19.07.2026

Tags: #DigitalSovereignty #OpenDesk #CyberCommand #ImpulseProgram #France #Linux #EU #TechSovereigntyPackage #Denmark #SchleswigHolstein #SwissGovernmentCloud #Apertus #HeidiZgraggen

Zurück zur Übersicht