Executive Summary

French defense contractor Thales and Google Cloud announced on May 20, 2026, a strategic partnership to develop a sovereign cloud platform in Germany. The new platform is to be market-ready by the end of 2026 and will offer German data protection against access by US authorities. A new German company under exclusive control of Thales will operate the infrastructure, which will be managed exclusively by German personnel. The project responds to growing unease in German business and administration over the dominance of US cloud providers and their legal obligation to grant data access under the US Cloud Act.

People

Topics

  • Digital Sovereignty
  • Cloud Computing
  • Data Protection
  • German Infrastructure

Clarus Lead

The announcement marks a turning point in the European debate over technological independence from US corporations. With this solution, the German economy is attempting to break through the structural dilemma between technology dependency and data protection requirements. The success of this model could serve as a blueprint for further European sovereignty projects, but also risks creating fragmented cloud infrastructure across the continent.

Detailed Summary

The core problem for European organizations lies in the contradiction between practical necessity and legal impossibility. The US Cloud Act requires American IT providers to grant US authorities access to all stored data upon request—regardless of physical server location. However, this violates the European Data Protection Regulation (GDPR) and can result in substantial fines.

The Thales-Google Cloud solution circumvents this conflict through institutional separation: A German company controlled by Thales operates dedicated infrastructure, while Google Cloud provides the technological platform, computing power, and AI capabilities, while Thales assumes cybersecurity architecture and sovereign control. Only German personnel have access to mission-critical functions. This structure is intended to ensure that neither the Google parent company nor US authorities can gain access to stored or processed data. The CEO emphasizes that German organizations will now have access to modern Google Cloud technologies under complete German control for the first time.

Key Statements

  • Thales and Google Cloud are building a German cloud platform with strict separation from the US parent company
  • The infrastructure will be operated exclusively by German personnel and subject to German control
  • The project responds to the conflict between cloud dependency and the US Cloud Act, which causes GDPR violations

Critical Questions

  1. Source Validity: How is it verified that Google actually has no technical access to the platform when Google supplies the platform software and performs updates?

  2. Legal Effectiveness: Can operational separation truly protect a German company from the Cloud Act when Google Inc. is considered the owner of the source code infrastructure?

  3. Conflicts of Interest: What economic incentives does Google have to subsidize this solution long-term if it limits its market dominance?

  4. Practical Implementation: How will the transition from existing hyperscaler solutions to the new platform be technically and economically realized for large enterprises and government agencies?

  5. Scalability: Can purely German infrastructure provide the same performance and AI capacity as global US platforms?

  6. Certification: What independent audits or certifications will verify and validate the sovereignty of this solution?

Source Directory

Primary Source: Digital Sovereignty: Thales and Google Cloud Announce US-Independent Cloud – https://www.golem.de/news/digitale-souveraenitaet-thales-und-google-cloud-kuendigen-von-usa-unabhaengige-cloud-an-2605-208888.html

Verification Status: ✓ May 20, 2026

This text was created with the support of an AI model. Editorial Responsibility: clarus.news | Fact-Check: May 20, 2026