EU cloud news, week of 2026-06-24

This week the sovereignty story moved from legislation to procurement: the news was about who is buying and building European infrastructure, and on what terms. A defence ministry, an AI-compute developer and a national telecoms operator each made the same choice in a different form - European-owned and European-governed over a US default.

Swedish Armed Forces pick Evroc for a sovereign "combat cloud" The Swedish Armed Forces have chosen Evroc, a Stockholm-based European cloud provider, to help build SINCC, the Swedish Interoperable Combat Cloud - a command-and-control platform that will handle classified data under Swedish, NATO and EU frameworks while letting Sweden work alongside allies without depending on their infrastructure. The line that matters is the one Evroc's chief executive used: information this sensitive should sit on infrastructure the country owns and governs itself. For a board, the signal is that sovereignty has moved past data residency into ownership and control - who runs the system, under whose law, and whether anyone outside the jurisdiction can reach it. A defence ministry is the most demanding buyer there is, and when it draws the line there, regulated commercial sectors tend to follow, because the questions an auditor asks are the same ones a general has just answered.

Policloud signs a €580 million deal to build a distributed sovereign AI cloud Policloud, a French AI-cloud start-up founded last year, has agreed a €580 million framework with the compute developer CloudGrid Energy to deploy 280 of its modular units - 29,000 GPUs in total - across 16 sites in France, Germany, Italy, Spain and Sweden, each sited next to renewable power. The detail worth holding onto is the shape of it: small, containerised data centres distributed across the network rather than one hyperscale campus, with the first unit already running in France. For teams scoping AI workloads, this is a useful reminder that European compute is genuinely arriving, but that capacity on European soil and European-controlled cloud remain different things. The questions that decide which one you are buying are who operates the units day to day, under which jurisdiction they fall, and what happens to your workloads if that answer changes.

KPN and Schwarz Digits launch a Dutch sovereign cloud on STACKIT KPN, the Dutch telecoms operator, and Schwarz Digits are bringing STACKIT to the Netherlands, with infrastructure hosted in KPN data centres, built on open-source software, assessed against the German BSI C5 standard, and aimed squarely at government, finance, healthcare and energy. It follows the Dutch government's own selection of STACKIT earlier this year, which came with a contractual exit clause if the provider ever moves outside the European Economic Area. For decision-makers, that exit clause is the part worth copying: it puts sovereignty into the contract rather than the brochure, and gives the buyer a defined route out if the facts change. National providers packaging sovereign offerings for regulated sectors is, in the end, how the option stops being exotic and becomes a normal line on a procurement shortlist, one market at a time.

Across all three, the deciding question was the same: who owns and governs the system, under whose law, and who can be kept out.

Thinking about migration? Book a free consultation to discuss your situation.