Amazon Web Services (AWS) has announced the initial customers leveraging its European Sovereign Cloud, a platform designed to host sensitive workloads exclusively within the European Union. This move comes as Europe continues to grapple with concerns over data sovereignty and its reliance on US cloud platforms. The service became generally available to European customers in January.
Leading European Organizations Adopt AWS’s New Offering
The AWS European Sovereign Cloud commenced operations with a single Region located in Brandenburg, Germany, with plans for further expansion across the EU. Among the early adopters are University Hospital Essen, German credit information bureau Schufa, and smart energy and water meter specialist Diehl Metering. These organizations are deploying critical services that demand stringent data residency and control.
Schufa, for instance, has developed a new credit scoring system on the AWS Cloud, managing sensitive financial data for over 69 million German consumers. Diehl Metering is utilizing the platform for public sector services, including monitoring and billing, aiding critical infrastructure like waterworks in managing energy and water data. University Hospital Essen is leveraging the platform for patient health data and developing new AI technologies to enhance patient care. Prof. Jens Kleesiek, the hospital’s director of its Institute for Artificial Intelligence in Medicine, stated that the cloud “will support this mission by allowing us to work with health data at scale, while meeting German and European sovereignty expectations.”
Addressing Europe’s Data Sovereignty Concerns
The introduction of the AWS European Sovereign Cloud directly addresses Europe’s growing demand for greater control over its digital infrastructure. This push intensified amid concerns over the US CLOUD Act, which can compel American organizations to provide access to data they hold, even if stored outside the United States. AWS asserts its European Sovereign Cloud is a physically and logically separate infrastructure, with all components located entirely within the EU.
An AWS spokesperson previously highlighted that the service includes multiple layers of legal, operational, and technical protections to safeguard data, asserting that not even AWS employees can access customer data and that advanced encryption is provided. However, some industry experts maintain that full sovereignty remains debatable for any cloud operating under the aegis of a US company.
Sovereignty Doubts Persist Amidst US CLOUD Act Scrutiny
Despite AWS’s assurances, legitimate doubts persist regarding the absolute immunity of US-owned cloud services from potential US governmental access requests. Forrester senior analyst Dario Maisto noted that while the AWS European Sovereign Cloud offers “a certain level of legal insulation” due to its separate German legal entity, its ownership by a US parent company represents “an important limitation to its immunity from the CLOUD Act and other US-led prescriptions.” This sentiment echoes past admissions by Microsoft executives regarding their inability to guarantee data sovereignty for French citizens.
In a competitive move, technology firm Thales recently announced the launch of its own European sovereign cloud service in Germany, in collaboration with Google Cloud. This service, available in preview now and targeting general availability by the end of 2026, aims to operate through a new German entity legally and operationally independent from Google Cloud. This model is intended to offer enhanced legal insulation, though its effectiveness against the CLOUD Act is yet to be tested in court, according to Maisto.
The Evolving Landscape of European Cloud Sovereignty
The unveiling of early adopters for the AWS European Sovereign Cloud underscores the increasing demand for data residency and control within the EU. The European Commission has also been actively promoting cloud sovereignty, awarding four contracts to Europe-based tech firms earlier this year. Forecasts indicate that spending on sovereign cloud infrastructure services is expected to more than triple from 2025 to 2027, signaling a significant market shift. As more organizations prioritize data protection and regulatory compliance, the landscape of cloud services in Europe will continue to evolve rapidly.
Follow Hashlytics on Bluesky, LinkedIn , Telegram and X to Get Instant Updates
