29OCT

ECIPE finds cloud tenders favour locals

4 min read

17:49UTC

A Brussels think tank counted 8,725 public cloud lots across nine member states and found about 97% went to domestically registered providers.

← Back to Iran threatens legal action on Sinokor ships Jump to analysis ↓

ConflictDeveloping

Key takeaway

Sovereign cloud tenders in nine states went almost entirely to home providers, ECIPE found.

Public buyers in nine member states gave about 97% of their awarded cloud lots to domestically registered providers between 2018 and 2025, the European Centre for International Political Economy (ECIPE), a Brussels free-trade think tank, found in a study published in October⁠¹. ECIPE counted 8,725 awarded lots on Tenders Electronic Daily, the EU procurement journal, in France, Germany, the Netherlands, Sweden, Finland, Italy, Denmark, Poland and Estonia. Counting the pan-European GEANT research-network framework, the domestic share is 88.9%; judged by the nationality of the ultimate parent company, it falls by 10 to 15 points.

Every lot framed in post-2019 sovereignty language, a small category in ECIPE's data, went to a home supplier. That framing covers national cloud-security labels such as France's SecNumCloud and Germany's C5, the GAIA-X data-sharing standard and clauses keeping data in the country. Under it ECIPE puts the sole-bidder rate at 46%, against 28% where no sovereignty language appears, though that figure rests on only 22 notices with bidder data. US platforms won no lot directly; their local subsidiaries won 16, or 0.2% of the total. At least 13 of 238 sovereignty-flagged awards name a US hyperscaler platform (one of the giant US cloud providers) underneath the winning provider. In ECIPE's words, "sovereignty attaches to the nationality of the operator".

Poland's proposed sovereignty test for state technology contracts would add one more national scoring rule to the same tenders. ECIPE aims its recommendations at four articles of the Cloud and AI Development Act (CADA), the Commission's June sovereign-cloud proposal.

European Digital Rights (EDRi), a digital-rights network, attacked CADA from the opposite flank on 8 October⁠². Citing CBRE, EDRi puts EU data-centre power consumption at about 13 GW by the end of 2026, and reckons CADA's aim of tripling capacity by 2035 would need about 39 GW. It argues the new sites would still rest on US investors and companies. ECIPE wants contracts opened across borders; EDRi wants a decentralised, open-source tech ecosystem run in the public interest.

Deep Analysis

In plain English

Cloud computing means renting computer power and storage from big data centres instead of running your own servers. Governments buy a lot of it. Many EU governments now say they want sovereign cloud, meaning services that stay under European control. ECIPE, a Brussels think tank that favours open trade, studied cloud contracts in nine EU countries and found that nearly all went to home-country firms. EDRi, a network of digital-rights groups, criticised the EU's planned cloud law from a different angle. It says building far more data centres would use huge amounts of electricity and still depend on American companies.

Deep Analysis

Root Causes

Public cloud buying is decentralised to thousands of national, regional and city contracting bodies. Each judges sovereignty by what it can check easily, and the registered address of a supplier is the simplest test to apply.

National security labels such as France's SecNumCloud and Germany's C5 were written by national agencies for national buyers. A provider certified in one country often has to recertify in another, which narrows the field before a tender opens.

US platforms reach the public sector through local resellers and subsidiaries, so a domestic winner can still deliver a US stack. Procurement rules that look at the contracting party never see the layer beneath it.

What could happen next?

Consequence
ECIPE's figures give opponents of nationality-based scoring evidence to amend four articles of the cloud bill in Parliament.
Short term · Suggested
Risk
Sovereignty clauses may keep raising the share of single-bidder tenders as more buyers adopt them.
Medium term · Suggested
Meaning
Critics from free-trade and digital-rights camps now agree that sovereign labels hide US technology, while disagreeing on the cure.
Short term · Assessed

Source Landscape

This story draws on neutral-leaning sources from United Kingdom

United Kingdom

Primary parallel: The 2009 Defence Procurement Directive aimed to open military buying across EU borders. Governments kept most contracts at home by citing security exemptions, the same mechanism ECIPE finds in cloud tenders that invoke sovereignty.

Counter-parallel: When the Commission bought for itself, the result crossed borders. Its €180m sovereign cloud framework in April went to consortia including Luxembourg's Post Telecom with OVHcloud and CleverCloud, and Schwarz Group's StackIT.

ECIPE's figures point first to concentration. Sole-bidder tenders generally deliver weaker price competition, and ECIPE finds them markedly more common under sovereignty framing, although on only 22 notices with bidder data.

Structurally, the market is growing fast while European providers stay small: one forecast puts European sovereign cloud spending rising from about $7bn in 2025 to $23bn by 2027, with EU-native providers holding about 15% of the wider cloud market. EDRi's power figures, about 13 GW now and about 39 GW if capacity triples by 2035, show the grid cost of that growth.

Consensus view: ECIPE's free-trade economists conclude that sovereignty clauses work as a nationality filter: they shrink competition (a 46% sole-bidder rate against 28% without such wording) while at least 13 of 238 flagged awards still run on a US hyperscaler platform. Its fix is to open public cloud tenders across EU borders.

Counter-view: European Digital Rights, arguing from the digital-rights left, accepts the dependency diagnosis but rejects the market cure. It says scaling data centres under the Cloud and AI Development Act would lock in US investors and power-hungry sites, and wants a decentralised, open-source estate run in the public interest.

Key tension: Whether the problem is too little competition between European providers or too much reliance on US technology underneath them; the two critiques prescribe opposite remedies.

First Reported In

Update #17 · EU questions AI labs over loss of control

ECIPE· 22 Oct 2026

Read original →

Causes and effects

Caused by

Poland proposes model-weights test for state contracts

Poland's proposed sovereignty test would add a national scoring rule to the tenders ECIPE counted.

Occurred 20 Jul 2026

Read story →

This Event

ECIPE finds cloud tenders favour locals

Sovereignty clauses in public cloud buying split the single market along operator nationality while some winners still run on US platforms.

Different Perspectives

United States (Joint Maritime Information Center)

The JMIC, the US-led naval reporting cell, rated the Hormuz threat "severe" in its 25 October advisory, as reported by gCaptain, and warned of possible renewed mining. Eight days earlier it found no substantiation for the Guards' mine claims, while US-facilitated transits ran at about 34 a day.

United Kingdom (CPS and Counter Terrorism Policing)

The CPS charged two men under the National Security Act 2023 over the RAF Fairford incident, and Counter Terrorism Policing said it believes the foreign intelligence service involved is Iran's, LBC reported. The case now runs through the courts; both men are charged, not convicted.

Aden and Yemen's recognised government

The Houthis told people to leave Aden airport, in the government-held south, before a missile fell there on 28 October, AFP reported, and police reported a second attack that afternoon. The fight between Riyadh and the Houthis is landing on the south's main civilian airport.

Qatar (mediators)

Qatar-led mediators put new terms to Iran this week, which an Iranian official called "ideas, not a proposal". Riyadh framed the Tehran meeting as support for Qatari and Pakistani mediation, keeping Doha at the centre of the indirect channel.

Korea Shipowners' Association

The association said the ships Iran listed were sub-chartered to an overseas oil company, not owned by Sinokor, carried no South Korean crew, and that Sinokor was unaware of the warning. South Korea's shipowners are contesting whose vessels the notice covers before it takes effect.

Kuwait (foreign ministry)

Kuwait summoned Iran's ambassador, Mohammad Toutounji, and handed him a protest note over the embassy's denial that its citizen took part in the alleged plot against Interior Minister Fahad Al-Yousef. Kuwait is answering through its courts and a diplomatic protest, citing international law and the UN Charter.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.