Europe's efforts to reduce reliance on US hyperscalers is under fire from many of the local cloud providers it is designed to help.

CISPE (Cloud Infrastructure Service Providers in Europe), a trade association of 38 of the region's cloud providers has issued a withering criticism of the official EU Cloud Sovereignty Framework, saying it is drafted so vaguely it will likely favor incumbents over local operators.

Under Trump 2.0, Europe's dependence on US clouds back under the spotlight [1]READ MORE

Officials that represent the trading bloc need a clear definition of just what a sovereign cloud is, however, the [2]framework [PDF] from the European Commission muddies the waters by inventing an opaque "sovereignty score" that dilutes meaningful standards.

The result? European cloud providers will likely score lower than foreign hyperscalers – an outcome CISPE suggests may be intentional to help public sector bodies avoid switching from their existing contracts with AWS, Microsoft Azure, and Google Cloud.

"CISPE's concern is that the Framework's criteria are so broad and weighted that they could allow a provider to tick enough boxes to get a high score without really delivering on the spirit of European sovereignty," a spokesperson told The Register .

[3]

"More fundamentally, we believe that you are either sovereign or you are not. Customers need a clear indicator. That's not to say that additional technological, legal or other safeguards can't deliver levels of control that are suitable for the cloud use cases customers need, especially those who participate in global supply chains."

[4]

[5]

CISPE claims it is trying to create tools that are "transparent, workable, and useful in the real world."

We asked the European Commission for a response to these claims.

[6]

AWS, Microsoft, and Google account for around 70 percent of cloud services revenues that are generated in Europe.

Sovereignty for cloud services has risen high up the agenda across the continent this year thanks to the volatile trading and political relationship with the Trump administration, and the realization of just how dependent businesses and governments in Europe are on AWS and Microsoft Azure.

In response, the cloud giants have added extra levels of control. Microsoft announced a [7]five-point plan to reassure EU customers , while Google [8]updated its sovereign cloud services in Europe, and AWS is forming a new [9]EU-based cloud business unit that becomes operational by the end of 2025.

[10]Google reminds EU that Microsoft's cloudy licensing still stinks a year later

[11]Datacenter lobby blows a fuse over EU efficiency proposals

[12]EU cloud gang challenges Broadcom's $61B VMware buy in court

[13]EU cloud gang wins Microsoft concessions, but fair software licensing group brands them 'stalling tactic'

Despite this, a Microsoft executive admitted under oath in a French Senate inquiry in July that it [14]cannot guarantee data sovereignty to European customers due to the CLOUD Act. The US legislation allows authorities stateside to demand access to any data held by American companies anywhere in the world.

Earlier this month, the European Commission [15]announced a tender under the Cloud III Dynamic Purchasing System (Cloud III DPS) that will allow EU institutions and agencies to procure sovereign cloud services over six years.

[16]

Up to four providers are set to be awarded contracts based on the new Cloud Sovereignty Framework between December 2025 and February 2026, it said.

CISPE is working to develop labels that will distinguish Sovereign Cloud and Operationally Resilient Cloud services, something missing from the EU's procurement framework.

The first builds on [17]Gaia-X Level 3 to guarantee immunity from foreign interference and full European control, according to CISPE, while the second offers customers – especially those in global supply chains – verifiable levels of operational and legal control over their data, even outside Europe. ®

Get our [18]Tech Resources



[1] https://www.theregister.com/2025/02/26/europe_has_second_thoughts_about/

[2] https://commission.europa.eu/document/download/09579818-64a6-4dd5-9577-446ab6219113_en?filename=Cloud-Sovereignty-Framework.pdf

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aP-lJe8BfUWXkmjapjX8OAAAAUk&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aP-lJe8BfUWXkmjapjX8OAAAAUk&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aP-lJe8BfUWXkmjapjX8OAAAAUk&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aP-lJe8BfUWXkmjapjX8OAAAAUk&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2025/04/30/microsoft_getting_nervous_about_europes/

[8] https://www.theregister.com/2025/05/21/google_sovereign_cloud_updates/

[9] https://www.theregister.com/2025/06/03/aws_european_sovereign_cloud/

[10] https://www.theregister.com/2025/09/25/google_microsoft_cloud_complaint/

[11] https://www.theregister.com/2025/07/30/datacenter_lobby_eu_efficiency/

[12] https://www.theregister.com/2025/07/24/cispe_seeks_broadcom_vmware_annulment/

[13] https://www.theregister.com/2025/07/18/cispe_microsoft_concessions/

[14] https://www.theregister.com/2025/07/25/microsoft_admits_it_cannot_guarantee/

[15] https://commission.europa.eu/news-and-media/news/commission-moves-forward-cloud-sovereignty-eur-180-million-tender-2025-10-10_en

[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aP-lJe8BfUWXkmjapjX8OAAAAUk&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[17] https://www.theregister.com/2022/02/04/gaia_x_ssi/

[18] https://whitepapers.theregister.com/