82% of German companies say they want to end technical dependence on US cloud providers. 78% remain dependent in practice. That nine-point gap between aspiration and execution is the entire trajectory in one statistic — and it is why the EU just moved from a decade of frameworks and pilot programmes into an actual, funded, enforceable Cloud and AI Development Act.
More than 60% of European corporate data currently resides with US hyperscalers — a concentration that became a board-level concern after the 2020 Schrems II ruling exposed how easily US law (specifically the CLOUD Act) can compel American companies to hand over data stored anywhere in the world, EU privacy law notwithstanding. Digital-Chiefs' 2026 survey of German corporate leadership puts the resulting anxiety in stark numbers: 82% of companies want to end technical dependence on US cloud providers. Only 22% have actually done so.
The reason is not ignorance. It is switching cost. Migrating critical enterprise workloads off AWS, Azure, and Google Cloud is expensive, disruptive, and — for AI-era workloads specifically — increasingly difficult, because frontier AI models themselves are trained and served predominantly on US hyperscaler infrastructure. Analysts covering the sector are explicit that full independence by 2026 was never realistic; the practical question boards actually face is which workloads carry enough regulatory or competitive risk to justify the migration cost, and which don't.
On 12 June 2026, the European Commission proposed the Cloud and AI Development Act — the clearest sign yet that Brussels has stopped treating this as a framework exercise and started treating it as funded industrial policy. The Act sets a target to triple EU data-centre capacity within five to seven years, establishes a Union-wide cloud sovereignty framework with tiered assurance levels, and creates dedicated public-sector procurement preferences for EU-based providers.
Digital sovereignty is no longer an IT decision. It has become a board-level question with geopolitical, regulatory, and economic dimensions attached — and 2026 is the year Europe started funding the answer rather than just debating it.
Gaia-X, launched in 2020, was never designed to replace AWS or Azure outright — it is a federated standards framework that lets European providers interoperate under common sovereignty, trust, and compliance rules. By 2025, it had reached over 400 certified service providers under its Gaia-X Label scheme, the first sovereignty-assurance system of its kind operating at real scale, with the first providers now certified at Label Level 3, the highest assurance tier.
Airbus is building an Aerospace Data Space through Gaia-X connecting roughly 10,000 suppliers. BMW's Catena-X data space has nearly 200 members. These are not pilot projects — they are live, production data infrastructure serving some of Europe's largest industrial companies, built specifically so operational and safety-critical data never has to leave European jurisdiction.
Real capital is now backing the sovereign-cloud alternative, not just standards bodies. SAP is investing €2 billion in sovereign cloud infrastructure, offering government and industrial clients a fully SAP-operated option with data kept strictly within German jurisdiction. Schwarz Group — Europe's largest retailer, owner of Lidl — is investing €11 billion in its STACKIT sovereign cloud platform. Deutsche Telekom's Open Telekom Cloud and France's OVHcloud round out the field of credible, "battle-tested" European alternatives to the big three hyperscalers.
Several German federal states have gone further than encouragement — they have mandated migration away from Microsoft 365 in government agencies, converting digital sovereignty from a corporate aspiration into binding public-sector procurement policy.
Gartner forecasts Europe will overtake North America in sovereign cloud spending by 2027 — a genuinely notable crossover point, given the US market's overall size. The Commission's June 2026 Act is the policy instrument meant to make that forecast real: tripling EU data-centre capacity within five to seven years, establishing Cloud and AI Leadership Initiatives, and building a Union-wide sovereignty framework with four defined assurance tiers rather than the patchwork of national rules that has slowed adoption to date.
Gaia-X itself welcomed the Act publicly, calling for "a practical, trusted path" to implementation — a notably cautious endorsement from the organisation that has spent six years building the underlying standards, and a signal that even sovereignty's strongest advocates know execution risk remains the real question, not political will.
This trajectory sits directly underneath the Sovereign AI trajectory published alongside it: a nation cannot meaningfully control its AI models, data pipelines, or compute if the cloud layer beneath all three still sits inside a foreign jurisdiction's legal reach. The EU's Cloud and AI Development Act, Gaia-X's federated trust framework, and the €13 billion-plus already committed by SAP and Schwarz Group are the infrastructure layer that European AI sovereignty depends on — not a separate story, but the foundation the AI story is built on.
The 82%-want-out, 78%-still-in gap is not closing quickly. Switching cost, AI-specific infrastructure lock-in, and the sheer scale advantage of the big three hyperscalers mean most European enterprises will run hybrid — sovereign cloud for regulated and sensitive workloads, US hyperscalers for everything else — for years, not quarters.
Gaia-X's own six-year track record is genuinely mixed. The architecture and standards exist; practical, at-scale implementation has lagged the original ambition. The June 2026 Act is explicitly a response to that lag, not evidence the lag has already been solved.
China's and Russia's contrasting models are the cautionary tale worth naming directly. China achieved genuine sovereignty by banning foreign hyperscalers and building its own from scratch — at the cost of interoperability and openness with the rest of the world. Russia attempted data localisation while remaining deeply reliant on Western technology underneath. Europe's federated, interoperable approach is deliberately choosing a harder, slower path in exchange for staying open — a real trade-off, not a free lunch.
The investable expression of this trajectory is infrastructure spend, not any single "sovereignty" narrative. Whoever is right about how much sovereignty Europe actually achieves, the €2B+€11B+ already committed by SAP and Schwarz Group alone, plus the EU's own tripling target, represents real, funded, multi-year capital expenditure — the more durable signal than any political rhetoric attached to it.
Part of an ongoing journal — observations recorded when something in the world economy is worth saying. No schedule. No noise. Not investment advice.