9JUN

ECIPE finds cloud tenders favour locals

4 min read

10:36UTC

A Brussels think tank counted 8,725 public cloud lots across nine member states and found about 97% went to domestically registered providers.

← Back to Trump warns Bibi as Israel strikes anyway Jump to analysis ↓

ConflictDeveloping

Key takeaway

Sovereign cloud tenders in nine states went almost entirely to home providers, ECIPE found.

Public buyers in nine member states gave about 97% of their awarded cloud lots to domestically registered providers between 2018 and 2025, the European Centre for International Political Economy (ECIPE), a Brussels free-trade think tank, found in a study published in October⁠¹. ECIPE counted 8,725 awarded lots on Tenders Electronic Daily, the EU procurement journal, in France, Germany, the Netherlands, Sweden, Finland, Italy, Denmark, Poland and Estonia. Counting the pan-European GEANT research-network framework, the domestic share is 88.9%; judged by the nationality of the ultimate parent company, it falls by 10 to 15 points.

Every lot framed in post-2019 sovereignty language, a small category in ECIPE's data, went to a home supplier. That framing covers national cloud-security labels such as France's SecNumCloud and Germany's C5, the GAIA-X data-sharing standard and clauses keeping data in the country. Under it ECIPE puts the sole-bidder rate at 46%, against 28% where no sovereignty language appears, though that figure rests on only 22 notices with bidder data. US platforms won no lot directly; their local subsidiaries won 16, or 0.2% of the total. At least 13 of 238 sovereignty-flagged awards name a US hyperscaler platform (one of the giant US cloud providers) underneath the winning provider. In ECIPE's words, "sovereignty attaches to the nationality of the operator".

Poland's proposed sovereignty test for state technology contracts would add one more national scoring rule to the same tenders. ECIPE aims its recommendations at four articles of the Cloud and AI Development Act (CADA), the Commission's June sovereign-cloud proposal.

European Digital Rights (EDRi), a digital-rights network, attacked CADA from the opposite flank on 8 October⁠². Citing CBRE, EDRi puts EU data-centre power consumption at about 13 GW by the end of 2026, and reckons CADA's aim of tripling capacity by 2035 would need about 39 GW. It argues the new sites would still rest on US investors and companies. ECIPE wants contracts opened across borders; EDRi wants a decentralised, open-source tech ecosystem run in the public interest.

Deep Analysis

In plain English

Cloud computing means renting computer power and storage from big data centres instead of running your own servers. Governments buy a lot of it. Many EU governments now say they want sovereign cloud, meaning services that stay under European control. ECIPE, a Brussels think tank that favours open trade, studied cloud contracts in nine EU countries and found that nearly all went to home-country firms. EDRi, a network of digital-rights groups, criticised the EU's planned cloud law from a different angle. It says building far more data centres would use huge amounts of electricity and still depend on American companies.

Deep Analysis

Root Causes

Public cloud buying is decentralised to thousands of national, regional and city contracting bodies. Each judges sovereignty by what it can check easily, and the registered address of a supplier is the simplest test to apply.

National security labels such as France's SecNumCloud and Germany's C5 were written by national agencies for national buyers. A provider certified in one country often has to recertify in another, which narrows the field before a tender opens.

US platforms reach the public sector through local resellers and subsidiaries, so a domestic winner can still deliver a US stack. Procurement rules that look at the contracting party never see the layer beneath it.

What could happen next?

Consequence
ECIPE's figures give opponents of nationality-based scoring evidence to amend four articles of the cloud bill in Parliament.
Short term · Suggested
Risk
Sovereignty clauses may keep raising the share of single-bidder tenders as more buyers adopt them.
Medium term · Suggested
Meaning
Critics from free-trade and digital-rights camps now agree that sovereign labels hide US technology, while disagreeing on the cure.
Short term · Assessed

Source Landscape

This story draws on neutral-leaning sources from United Kingdom

United Kingdom

Primary parallel: The 2009 Defence Procurement Directive aimed to open military buying across EU borders. Governments kept most contracts at home by citing security exemptions, the same mechanism ECIPE finds in cloud tenders that invoke sovereignty.

Counter-parallel: When the Commission bought for itself, the result crossed borders. Its €180m sovereign cloud framework in April went to consortia including Luxembourg's Post Telecom with OVHcloud and CleverCloud, and Schwarz Group's StackIT.

ECIPE's figures point first to concentration. Sole-bidder tenders generally deliver weaker price competition, and ECIPE finds them markedly more common under sovereignty framing, although on only 22 notices with bidder data.

Structurally, the market is growing fast while European providers stay small: one forecast puts European sovereign cloud spending rising from about $7bn in 2025 to $23bn by 2027, with EU-native providers holding about 15% of the wider cloud market. EDRi's power figures, about 13 GW now and about 39 GW if capacity triples by 2035, show the grid cost of that growth.

Consensus view: ECIPE's free-trade economists conclude that sovereignty clauses work as a nationality filter: they shrink competition (a 46% sole-bidder rate against 28% without such wording) while at least 13 of 238 flagged awards still run on a US hyperscaler platform. Its fix is to open public cloud tenders across EU borders.

Counter-view: European Digital Rights, arguing from the digital-rights left, accepts the dependency diagnosis but rejects the market cure. It says scaling data centres under the Cloud and AI Development Act would lock in US investors and power-hungry sites, and wants a decentralised, open-source estate run in the public interest.

Key tension: Whether the problem is too little competition between European providers or too much reliance on US technology underneath them; the two critiques prescribe opposite remedies.

First Reported In

Update #17 · EU questions AI labs over loss of control

ECIPE· 22 Oct 2026

Read original →

Causes and effects

Caused by

Poland proposes model-weights test for state contracts

Poland's proposed sovereignty test would add a national scoring rule to the tenders ECIPE counted.

Occurred 20 Jul 2026

Read story →

This Event

ECIPE finds cloud tenders favour locals

Sovereignty clauses in public cloud buying split the single market along operator nationality while some winners still run on US platforms.

Different Perspectives

Wang Yi

China's foreign minister and Djibouti's issued a joint communique on 21 October saying the war should not reach the Horn of Africa and stressing free navigation through Bab al-Mandeb. The text names neither Iran nor the Houthis, and Djibouti hosts China's only overseas military base, opposite the Yemeni coast.

Ministry of External Affairs

India's foreign ministry called the attacks on Saudi civilian and energy sites "unacceptable" on 22 October and said they must stop at once. An Indian died at Dammam, Indians were injured there and at Shaybah, and about 4,000 Umrah pilgrims remain stranded by one MP's count.

Iraq

Iraq closed the al-Sheeb crossing with Iran to travellers and trucks from 21 October and said other crossings would close gradually. Unlike September's closure, which ended on a staged timetable, this one has none, and Iran's interior ministry said it received no notice.

Abdel Fattah el-Sisi

Egypt's president said on 21 October that Cairo's support would "defend Saudi territory, and does not include an attack on Yemen". Araghchi warned that Egyptian involvement would further complicate the situation, and Cairo's limit matches the one Ankara set on 8 October against attacking another state's soil.

UK Ministry of Defence

The MoD said on 20 October that RAF Typhoons over Saudi Arabia will not strike the Houthis, but extended tanker support to Saudi operations including against Houthi targets in Yemen. The tanker line sets no limit on strikes, so British aircraft may now refuel Saudi jets on bombing runs.

Turkey

Ankara sent the Mecca Joint Defence Agreement to parliament around 20 October, and its published text treats an attack on one party as an attack on all. Article 16 brings it into force only on the last ratification, so the 5 October invocation in Riyadh could not yet bind Turkey.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.