The Europe sovereign cloud market was valued at USD 17.5 billion in 2025. This market is expected to reach USD 118 billion by 2036, growing from USD 21.0 billion in 2026, at a CAGR of 18.8% from 2026 to 2036.

Key Highlights – Europe Sovereign Cloud Market

• The Europe sovereign cloud market is expected to reach USD 118 billion by 2036, at a CAGR of 18.8% from 2026 to 2036.
• Germany is the largest country market, followed by France, the United Kingdom, Italy, and Spain, reflecting their large economies, public sectors, and regulatory focus.
• Government and public sector is the largest end-user segment, followed by BFSI, healthcare, and defense.
• Infrastructure-as-a-Service (IaaS) accounts for the largest share by service model, with Platform and Software services growing.
• The Schrems II ruling of 16 July 2020 and the extraterritorial reach of the US CLOUD Act are the fundamental legal drivers of demand.
• AWS launched its European Sovereign Cloud with a first region in Brandenburg, Germany, backed by a planned investment of over EUR 7.8 billion.
• Microsoft operates partner clouds Bleu in France and Delos Cloud in Germany, while Google operates S3NS in France with Thales.
• European providers including OVHcloud, IONOS, Scaleway, StackIt, and Aruba compete alongside sovereign offerings from hyperscalers.
• Certification frameworks including SecNumCloud, C5, and the emerging EUCS scheme, together with GAIA-X, shape the market.

Europe Sovereign Cloud Market: Data Sovereignty, Regulation, and Digital Autonomy Drive Market Growth

The Europe sovereign cloud market comprises cloud computing services, including infrastructure, platform, and software services, that are designed and operated to ensure that data and workloads remain under European legal, operational, and technical control, insulated from non-European jurisdiction and access. It covers sovereign cloud regions operated by global providers under European control, partner and data-trustee models, and cloud services from European providers, used by government, regulated industries, and enterprises across Europe. The market is driven fundamentally by legal and regulatory concerns: the invalidation of the EU-US Privacy Shield by the Court of Justice of the European Union in the Schrems II judgment of 16 July 2020, together with the extraterritorial reach of the US CLOUD Act, established that data held by non-European providers, even within Europe, could be subject to foreign access, creating demand for cloud services that guarantee European control. Reinforced by GDPR, sector regulation such as DORA and NIS2, national certification schemes, and a broad European push for digital autonomy, the market is set for rapid growth as public sector and regulated industries adopt sovereign cloud.

Schrems II and the CLOUD Act Created the Demand

The legal exposure of European data to foreign jurisdiction is the fundamental driver of the market. The Court of Justice of the European Union invalidated the EU-US Privacy Shield in the Schrems II judgment on 16 July 2020, finding that the United States did not provide an adequate level of data protection, while the US CLOUD Act allows US authorities to compel US-headquartered companies to produce data they control regardless of where that data is physically stored. This means that a data center physically located in the EU but operated by a US-headquartered provider can remain legally reachable by US courts, so physical data-center location alone does not guarantee sovereignty. This legal exposure created the fundamental demand for sovereign cloud, cloud services structured to ensure that data and operations remain under European legal control and beyond the reach of foreign jurisdiction, and it is the defining driver of the market.

Regulation and Certification Frameworks Shape the Market

A framework of European regulation and certification shapes the definition and requirements of sovereign cloud. The General Data Protection Regulation governs the handling of personal data, while sector-specific regulation, including the Digital Operational Resilience Act for financial services and the NIS2 Directive for critical infrastructure, imposes requirements on the resilience and control of cloud services. National certification schemes, including France's SecNumCloud, operated by the national cybersecurity agency, and Germany's C5, define standards for sovereign and secure cloud, and the emerging EU-wide EUCS scheme aims to provide a common certification, while the GAIA-X initiative promotes federated, interoperable European data infrastructure. This framework of regulation and certification defines what qualifies as sovereign cloud and sets the requirements that providers must meet, shaping the market and driving demand for certified, compliant sovereign services.

Public Sector and Regulated Industries Drive Adoption

Government and regulated industries are the primary drivers of sovereign cloud adoption, given their acute sovereignty requirements. Public sector organizations handle sensitive citizen and government data and are subject to strong requirements to keep that data under national control, making them core adopters of sovereign cloud, while regulated industries, including financial services under DORA, healthcare handling patient data, and defense and aerospace, have stringent requirements for data control, resilience, and security. These sectors are willing to prioritize sovereignty and compliance, and often to pay a premium, to ensure their data remains under European control. The demand from government and regulated industries, driven by their acute sovereignty and compliance requirements, is the primary source of adoption and the leading driver of market growth.

Hyperscaler Sovereign Offerings and Partner Models Expand the Market

The sovereign offerings and partner models of global cloud providers are a major and expanding part of the market. Responding to sovereignty demand, global providers have created dedicated sovereign offerings and partnerships: Amazon Web Services launched its AWS European Sovereign Cloud with a first region in Brandenburg, Germany, backed by a planned investment of over EUR 7.8 billion, operated by a separate EU-controlled parent company led by EU citizens, with expansion planned to Belgium, the Netherlands, and Portugal; Microsoft operates the partner clouds Bleu, a joint venture of Orange and Capgemini in France, and Delos Cloud in Germany, alongside its EU Data Boundary; Google Cloud operates S3NS in France together with Thales and uses T-Systems as a data trustee in Germany; and Oracle offers an EU Sovereign Cloud. These offerings bring the scale and service breadth of global providers to the sovereign market, and their expansion is a major driver of market growth, even as debate continues over whether providers subject to foreign jurisdiction can fully guarantee sovereignty.

European Providers and the Sovereignty Debate

European cloud providers and the ongoing debate over the nature of sovereignty are important dynamics in the market. Fully European providers, including OVHcloud and Scaleway in France, IONOS, StackIt (Schwarz Digits), and Delos-related infrastructure in Germany, and Aruba in Italy, offer cloud services under European ownership and jurisdiction, positioning themselves as inherently sovereign and free from foreign legal reach. A central debate concerns whether sovereignty requires European ownership, given that the CLOUD Act can reach US-headquartered providers regardless of data location, or whether operational and technical controls, such as partner operation and data trustees, can suffice. This debate over the definition and sufficiency of sovereignty shapes competition and customer choice, and it drives demand for the strongest forms of sovereignty, benefiting European providers and rigorous certification, while the market accommodates a spectrum of sovereign models.

Geopolitics, Digital Autonomy, and Investment Accelerate Growth

Geopolitical concerns and the drive for European digital autonomy are accelerating the market. Heightened geopolitical uncertainty and concerns about dependence on non-European technology providers have intensified Europe's push for digital sovereignty and autonomy, elevating sovereign cloud from a compliance consideration to a strategic priority for governments and enterprises. This has prompted major investment, both by global providers building sovereign infrastructure in Europe and by European providers and initiatives, supported by European policy promoting digital autonomy and a competitive European cloud sector. The combination of geopolitical concern, the strategic drive for digital autonomy, and substantial investment is accelerating adoption and investment, and is a powerful driver of the market's rapid growth.

Segmental Analysis

Market by Service Model

By service model, the market comprises Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service. Infrastructure-as-a-Service, providing sovereign compute, storage, and networking, accounts for the largest share, as organizations move core workloads to sovereign infrastructure. Platform-as-a-Service, providing sovereign development and data platforms, and Software-as-a-Service, providing sovereign applications, are growing as the market matures and sovereignty extends up the stack. Infrastructure services dominate the market by value, while platform and software services grow as organizations seek sovereignty across the full range of cloud services, and the mix reflects the progression of sovereign cloud adoption.

Market by Sovereignty Model

By sovereignty model, the market comprises sovereign regions operated by global providers under European control, partner and data-trustee models, and services from fully European providers. Sovereign regions and offerings from global providers, such as the AWS European Sovereign Cloud and Oracle EU Sovereign Cloud, bring global scale and service breadth under European governance. Partner and trustee models, such as Bleu, Delos Cloud, and S3NS, combine global technology with European operation and control. Fully European providers, such as OVHcloud, IONOS, Scaleway, StackIt, and Aruba, offer services under European ownership and jurisdiction. The market spans this spectrum of sovereignty models, with customers selecting based on their sovereignty requirements, and the mix reflects the range of approaches to delivering sovereign cloud.

Market by End User

By end user, the market spans government and public sector, BFSI, healthcare, defense and aerospace, telecom, energy, and other industries. Government and public sector is the largest end-user segment, given the sensitivity of citizen and government data and strong requirements for national control, and is a core adopter of sovereign cloud. BFSI, driven by DORA and the sensitivity of financial data, and healthcare, handling patient data, are major segments, while defense and aerospace have among the most stringent sovereignty requirements. Government and public sector dominates demand, while regulated industries provide substantial and growing adoption, and the distribution reflects the concentration of sovereignty requirements in the public sector and regulated verticals.

Voice of Customer

Primary interviews conducted for this study consistently emphasized that sovereignty is driven by legal exposure rather than data-center location, and that the definition of sovereignty is central to procurement. Two representative perspectives are summarized below.

"The turning point for us was realizing that a data center in Frankfurt run by a US provider is still reachable under the CLOUD Act. Location is not sovereignty. We now evaluate legal control and operational independence, not just where the servers sit." — Head of IT, European public sector organization

"Every provider now claims to be sovereign, so the hard work is defining what sovereignty actually means for our regulated workloads and holding providers to it. Certification like SecNumCloud and the coming EU scheme are how we cut through the marketing." — Chief information security officer, European financial institution

Analyst Perspective

The Europe sovereign cloud market is, at heart, a market created by a legal ruling. In our view, the Schrems II judgment and the reach of the US CLOUD Act did something unusual, they made clear that where data physically sits matters far less than which legal system can compel access to it, and in doing so they turned digital sovereignty from an abstract policy debate into a concrete procurement requirement for European governments and regulated industries. The result is one of the more interesting competitive situations in cloud: global providers building genuinely separate, EU-controlled sovereign clouds, backed by billions in investment; partner and trustee models that wrap global technology in European operation; and a cohort of European providers arguing that only European ownership can truly satisfy sovereignty. We do not expect this debate to resolve into a single model. Instead, we expect a spectrum of sovereignty to persist, with customers matching the rigor of the model, from data residency through to full operational and legal independence, to the sensitivity of the workload. Growth will be rapid, driven by public-sector mandates, DORA and NIS2, and an increasingly strategic view of digital autonomy amid geopolitical uncertainty. The winners will be those who can combine credible, certifiable sovereignty with the scale and service breadth that customers have come to expect from the cloud, a combination that is harder to deliver than either alone.

Market by Geography

Germany Sovereign Cloud Market

Germany is the largest country market for sovereign cloud, reflecting its large economy, extensive public sector, and strong focus on data protection and sovereignty. Germany has a long-standing emphasis on data protection and digital sovereignty, a large public sector and regulated industry base, and a strong domestic cloud and technology sector, including providers such as IONOS, StackIt (Schwarz Digits), Delos Cloud, and T-Systems, as well as the first AWS European Sovereign Cloud region in Brandenburg. The scale of German demand, its regulatory focus, and its domestic provider base make Germany the largest sovereign cloud market in Europe. The country's C5 certification standard and strong public-sector and industrial demand reinforce its leading position, and its combination of demand and domestic supply anchors the European market.

France Sovereign Cloud Market

France is a major country market, distinguished by its pioneering sovereignty certification and strong domestic providers. France established the SecNumCloud certification, operated by its national cybersecurity agency, setting a rigorous standard for sovereign cloud, and has strong domestic providers including OVHcloud and Scaleway, as well as the partner clouds Bleu and S3NS. The French government's strong emphasis on digital sovereignty, its rigorous certification, and its domestic provider base make France one of the largest and most advanced sovereign cloud markets in Europe. France's leadership in defining sovereignty requirements and its strong provider ecosystem make it a major and influential market.

United Kingdom Sovereign Cloud Market

The United Kingdom is a significant country market, with a large economy and its own data-protection and sovereignty considerations. While no longer in the EU, the United Kingdom maintains strong data-protection requirements and public-sector demand for cloud services under national control, and has a large financial services sector with stringent requirements. The scale of the UK economy, its public sector, and its regulated industries generate substantial demand for sovereign and secure cloud services. The United Kingdom's large economy and strong data-protection and public-sector requirements make it a significant sovereign cloud market.

Italy, Spain, and Rest of Europe Sovereign Cloud Market

Italy, Spain, and the rest of Europe account for a significant and growing share of the market. Italy has domestic providers including Aruba and growing public-sector demand, Spain has a large market served by providers including Telefónica, and other European countries across the EU and beyond are developing sovereign cloud capabilities and demand, supported by EU-wide policy and certification. The broad application of sovereignty requirements across all European markets, together with the large combined economies and public sectors of these countries, makes the rest of Europe a significant and growing part of the market. The extension of sovereign cloud across all of Europe, driven by common regulation and the shared drive for digital autonomy, supports strong demand throughout the region.

Competitive Landscape

The Europe sovereign cloud market is served by global cloud providers with sovereign offerings, partner and trustee ventures, and European cloud providers. Competition centers on global providers building EU-controlled sovereign clouds, partner ventures combining global technology with European operation, and European providers offering services under European ownership. Participants compete on the strength and certifiability of their sovereignty, the scale and breadth of their services, security and compliance, performance, and relationships with government and regulated industries. The combination of sovereignty credibility with cloud scale and service breadth is the central competitive challenge, and the market accommodates a spectrum of models, from global providers' sovereign regions to fully European providers.

A key competitive dynamic is the tension between sovereignty credibility and cloud capability, and the role of certification. Global providers including Amazon Web Services, with its European Sovereign Cloud, Microsoft, with Bleu and Delos Cloud, Google Cloud, with S3NS and T-Systems as trustee, and Oracle, with its EU Sovereign Cloud, bring scale and breadth under varying sovereignty models, while European providers including OVHcloud, IONOS, Scaleway, StackIt, and Aruba emphasize European ownership and jurisdiction. Certification schemes such as SecNumCloud, C5, and the emerging EUCS are increasingly decisive in demonstrating sovereignty, and investment in sovereign infrastructure, certification, and service breadth is central to competition. The market is dynamic and strategically important, with competition intensifying as sovereignty becomes a priority across European government and industry.

Key Players

The key companies operating in the Europe sovereign cloud market include:

• Amazon Web Services (AWS European Sovereign Cloud)
• Microsoft Corporation
• Google Cloud (S3NS)
• Oracle Corporation
• OVHcloud
• Deutsche Telekom / T-Systems
• SAP SE (Delos Cloud)
• IONOS SE
• Schwarz Digits (StackIt)
• Scaleway (Iliad Group)
• Aruba S.p.A.
• Telefónica Tech
• Orange Business (Bleu)
• Capgemini (Bleu)
• Thales Group (S3NS)
• Atos / Eviden
• Proximus
• Fujitsu