By Michał Puchała · 2026-08-27 · 4 min read
EU cloud news, week of 2026-08-27
Germany redirects federal cloud procurement towards local consortia, the EU funds reusable data infrastructure, Scaleway strengthens enterprise controls, CNCF measures open-source governance, and UNDP begins testing sovereign cloud and AI models with public institutions.
This week, cloud sovereignty moved from broad policy into decisions that organisations can inspect. Germany changed who supplies a federal cloud project, while updates on European data, cloud operations, open-source governance and public-sector AI showed how control is being measured in practice.
Germany selects local consortia for a federal cloud and AI tender Thomas Jarzombek, parliamentary state secretary in Germany's Federal Ministry for Digital Transformation and Government Modernisation, said the ministry's new cloud and AI procurement selected two German groupings: Telekom with SAP, and an SVA-led consortium with Codesphere and Schwarz Digits. Previous arrangements used framework contracts involving providers from outside Germany. Jarzombek linked the change to both security and local technology investment, while defining sovereignty as the ability to keep using, adapt or change a service. For boards, the important signal is that public buyers are starting to use supplier control and exit options as procurement criteria, which can influence the questions asked throughout regulated supply chains.
The EU sets out its funded work on reusable data infrastructure The European Commission summarised Digital Europe projects intended to make public and sector data easier to share securely. Four projects are working on high-value public datasets for AI and open-data platforms, while two selected projects address data-based regulatory reporting. The programme also supports common European data spaces across 14 sectors, designed so organisations can exchange information while retaining control over it. For management teams, this is a reminder that European digital capacity depends on usable data rules and shared infrastructure as well as data centres.
Scaleway adds group provisioning and a service commitment for its data warehouse Scaleway's August changelog adds group provisioning to its SCIM identity integration, including support for provisioning groups from Microsoft Entra ID, although nested groups are not supported. It also adds a service-level agreement for the provider's managed ClickHouse data warehouse, which is used for large-scale analytics. These are modest updates, but central identity management and a defined availability commitment are among the controls enterprise teams expect before moving production workloads. CTOs comparing European clouds should test the identity limitation against their directory structure and read the detailed agreement rather than treating the announcement itself as evidence of fit.
CNCF measures how open-source governance affects project independence The Cloud Native Computing Foundation reviewed governance across 72 graduated, incubating and archived projects. Projects that entered its sandbox with maintainers from several organisations graduated at just over twice the rate of projects with maintainers from one organisation, while 20 percent of graduated projects later showed governance concentration. The analysis found organisationally balanced voting to be the strongest observed predictor of sustained diversity. For cloud buyers, the practical lesson is that access to source code does not establish independence on its own: check who maintains the software, who can change its direction and whether another organisation could keep it operating.
UNDP and DFINITY begin sovereign cloud and decentralised AI pilots The United Nations Development Programme and Switzerland-based DFINITY Foundation announced work with UNDP country offices, civil-society organisations and public institutions to test sovereign cloud infrastructure and decentralised AI applications. The planned activities include pilot applications, capacity building and frameworks tailored to national or local priorities. The announcement comes from the two partners and describes exploration rather than a production result, so claims about security, resilience and ease of operation still need independent evidence. Its value is the evaluation model: build a bounded public-purpose use case, test governance and safeguards, then decide whether the approach deserves wider adoption.
Across the five stories, control is becoming a set of procurement, architecture and governance decisions that organisations can verify.
Thinking about migration? Book a free consultation to discuss your situation.