
Cloud au Centre
France's state cloud-first doctrine mandating sovereign-qualified hosting for all sensitive public data.
Last refreshed: 17 May 2026
Has Cloud au Centre actually shifted French public data off US cloud, or is it still mostly Microsoft?
Timeline for Cloud au Centre
Mentioned in: France awards Health Data Hub to Scaleway
European Tech Sovereignty- What is the Cloud au Centre doctrine and who does it apply to?
- Cloud au Centre is France's 2021 interministerial directive making cloud the default for state digital services. For sensitive data, it requires hosting by providers with SecNumCloud qualification, barring non-EU state authority access. All ministries and agencies are covered.Source: numerique.gouv.fr
- Does Cloud au Centre ban US cloud providers from French government contracts?
- Not entirely. Cloud au Centre bans non-SecNumCloud providers from hosting sensitive data, and US hyperscalers cannot currently meet the requirement's prohibition on non-EU state authority access. For non-sensitive workloads, US providers remain eligible.Source: DINUM / ANSSI doctrine guidance
- How does Cloud au Centre relate to the Health Data Hub move to Scaleway?
- The Health Data Hub's migration from Microsoft Azure to Scaleway in April 2026 is the most high-profile enforcement of Cloud au Centre, fulfilling the doctrine's requirement that sensitive public health data be hosted by a SecNumCloud-qualified European provider.Source: Euronews / Scaleway, April 2026
Background
Cloud au Centre ('Cloud at the Centre') is France's interministerial digital doctrine, published in 2021, that makes cloud the default mode of hosting for all new or substantially evolved state digital services. For sensitive data — systems whose violation could harm public order, public safety, or health — the doctrine mandates cloud services that hold SecNumCloud qualification from ANSSI or an equivalent European certification, and prohibits access by third-country (i.e. non-EU) state authorities. The 2021 circular governs all ministries, agencies, and state operators.
The first five-year assessment, published by DINUM in late 2025, confirmed that cloud consumption grew strongly and SecNumCloud established itself as the de facto trust benchmark for public-sector procurement. However, inter-ministerial pooling remained limited and budget constraints slowed adoption among some actors. Public procurement under the doctrine primarily benefited French providers and Microsoft — a tension the Health Data Hub Scaleway award directly addresses.
Cloud au Centre sits at the centre of French digital sovereignty strategy alongside SecNumCloud certification and the broader CAIDA legislative initiative at EU level. The doctrine's practical effect is that any European cloud provider seeking French public-sector contracts must either hold SecNumCloud qualification or demonstrate equivalent sovereign-cloud guarantees, reshaping the competitive landscape away from US hyperscalers for the most sensitive workloads.