22OCT

ECIPE finds cloud tenders favour locals

4 min read

19:10UTC

A Brussels think tank counted 8,725 public cloud lots across nine member states and found about 97% went to domestically registered providers.

← Back to Kremlin floats 10 November talks as diesel deal work begins Jump to analysis ↓

ConflictDeveloping

Key takeaway

Sovereign cloud tenders in nine states went almost entirely to home providers, ECIPE found.

Public buyers in nine member states gave about 97% of their awarded cloud lots to domestically registered providers between 2018 and 2025, the European Centre for International Political Economy (ECIPE), a Brussels free-trade think tank, found in a study published in October⁠¹. ECIPE counted 8,725 awarded lots on Tenders Electronic Daily, the EU procurement journal, in France, Germany, the Netherlands, Sweden, Finland, Italy, Denmark, Poland and Estonia. Counting the pan-European GEANT research-network framework, the domestic share is 88.9%; judged by the nationality of the ultimate parent company, it falls by 10 to 15 points.

Every lot framed in post-2019 sovereignty language, a small category in ECIPE's data, went to a home supplier. That framing covers national cloud-security labels such as France's SecNumCloud and Germany's C5, the GAIA-X data-sharing standard and clauses keeping data in the country. Under it ECIPE puts the sole-bidder rate at 46%, against 28% where no sovereignty language appears, though that figure rests on only 22 notices with bidder data. US platforms won no lot directly; their local subsidiaries won 16, or 0.2% of the total. At least 13 of 238 sovereignty-flagged awards name a US hyperscaler platform (one of the giant US cloud providers) underneath the winning provider. In ECIPE's words, "sovereignty attaches to the nationality of the operator".

Poland's proposed sovereignty test for state technology contracts would add one more national scoring rule to the same tenders. ECIPE aims its recommendations at four articles of the Cloud and AI Development Act (CADA), the Commission's June sovereign-cloud proposal.

European Digital Rights (EDRi), a digital-rights network, attacked CADA from the opposite flank on 8 October⁠². Citing CBRE, EDRi puts EU data-centre power consumption at about 13 GW by the end of 2026, and reckons CADA's aim of tripling capacity by 2035 would need about 39 GW. It argues the new sites would still rest on US investors and companies. ECIPE wants contracts opened across borders; EDRi wants a decentralised, open-source tech ecosystem run in the public interest.

Deep Analysis

In plain English

Cloud computing means renting computer power and storage from big data centres instead of running your own servers. Governments buy a lot of it. Many EU governments now say they want sovereign cloud, meaning services that stay under European control. ECIPE, a Brussels think tank that favours open trade, studied cloud contracts in nine EU countries and found that nearly all went to home-country firms. EDRi, a network of digital-rights groups, criticised the EU's planned cloud law from a different angle. It says building far more data centres would use huge amounts of electricity and still depend on American companies.

Deep Analysis

Root Causes

Public cloud buying is decentralised to thousands of national, regional and city contracting bodies. Each judges sovereignty by what it can check easily, and the registered address of a supplier is the simplest test to apply.

National security labels such as France's SecNumCloud and Germany's C5 were written by national agencies for national buyers. A provider certified in one country often has to recertify in another, which narrows the field before a tender opens.

US platforms reach the public sector through local resellers and subsidiaries, so a domestic winner can still deliver a US stack. Procurement rules that look at the contracting party never see the layer beneath it.

What could happen next?

Consequence
ECIPE's figures give opponents of nationality-based scoring evidence to amend four articles of the cloud bill in Parliament.
Short term · Suggested
Risk
Sovereignty clauses may keep raising the share of single-bidder tenders as more buyers adopt them.
Medium term · Suggested
Meaning
Critics from free-trade and digital-rights camps now agree that sovereign labels hide US technology, while disagreeing on the cure.
Short term · Assessed

Source Landscape

This story draws on neutral-leaning sources from United Kingdom

United Kingdom

Primary parallel: The 2009 Defence Procurement Directive aimed to open military buying across EU borders. Governments kept most contracts at home by citing security exemptions, the same mechanism ECIPE finds in cloud tenders that invoke sovereignty.

Counter-parallel: When the Commission bought for itself, the result crossed borders. Its €180m sovereign cloud framework in April went to consortia including Luxembourg's Post Telecom with OVHcloud and CleverCloud, and Schwarz Group's StackIT.

ECIPE's figures point first to concentration. Sole-bidder tenders generally deliver weaker price competition, and ECIPE finds them markedly more common under sovereignty framing, although on only 22 notices with bidder data.

Structurally, the market is growing fast while European providers stay small: one forecast puts European sovereign cloud spending rising from about $7bn in 2025 to $23bn by 2027, with EU-native providers holding about 15% of the wider cloud market. EDRi's power figures, about 13 GW now and about 39 GW if capacity triples by 2035, show the grid cost of that growth.

Consensus view: ECIPE's free-trade economists conclude that sovereignty clauses work as a nationality filter: they shrink competition (a 46% sole-bidder rate against 28% without such wording) while at least 13 of 238 flagged awards still run on a US hyperscaler platform. Its fix is to open public cloud tenders across EU borders.

Counter-view: European Digital Rights, arguing from the digital-rights left, accepts the dependency diagnosis but rejects the market cure. It says scaling data centres under the Cloud and AI Development Act would lock in US investors and power-hungry sites, and wants a decentralised, open-source estate run in the public interest.

Key tension: Whether the problem is too little competition between European providers or too much Reliance on US technology underneath them; the two critiques prescribe opposite remedies.

First Reported In

Update #17 · EU questions AI labs over loss of control

ECIPE· 22 Oct 2026

Read original →

Causes and effects

Caused by

Poland proposes model-weights test for state contracts

Poland's proposed sovereignty test would add a national scoring rule to the tenders ECIPE counted.

Occurred 20 Jul 2026

Read story →

This Event

ECIPE finds cloud tenders favour locals

Sovereignty clauses in public cloud buying split the single market along operator nationality while some winners still run on US platforms.

Different Perspectives

South Korean foreign ministry

Seoul said on 20 October it will withdraw some Kyiv embassy staff, citing no constructive steps from Kyiv since it recalled its ambassador over the disclosure of two North Korean prisoners. A chargé d'affaires and consular staff stay, and Seoul says its aid continues.

Alexander Lukashenko

Lukashenko said on 22 October that talks with the US show progress despite problems, which he said were highlighted with the exchange of political prisoners for the lifting of sanctions. He said Minsk keeps its promises and wants the US to deliver its side in full.

Moldovan government (Daniella Misail-Nichitin)

Moldova has pulled its border guards and customs officers from four crossings on Ukrainian soil after Russian strikes near the border. Interior Minister Daniella Misail-Nichitin said Chisinau is weighing moving Ukrainian checkpoints onto Moldovan territory.

Péter Magyar

Magyar told RTL that Ukrainian maize may cross Hungary in sealed trains bound for Western Europe. He set one condition: the cargo must only transit the country.

Donald Tusk

Tusk said Warsaw would seek an explanation from Kyiv for the drone's route across Poland. He said Poland allows no operations over its territory without its explicit consent.

Mindaugas Sinkevičius

Lithuania's prime minister said the Ukrainian drone that exploded in Pasvalys district on 18 October carried explosives and entered from Poland through the Schengen zone. Earlier drones over Lithuania had come from Belarus, not through allied airspace.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.