Europe's tech sovereignty push is not just another Brussels rulebook. It is an attempt to turn cloud, chips and AI infrastructure into a European industrial market.
The European Commission is putting numbers and procurement rules behind a phrase that has been floating around policy circles for years. Its Tech Sovereignty package, scheduled for June 3, brings together the Cloud and AI Development Act, Chips Act 2.0, an open source strategy and an energy roadmap for digitalisation and AI.
That matters because AI sovereignty is no longer only a speech about values. It is becoming a question of who gets public cloud contracts, who can build data centers quickly, who supplies chips to strategic sectors and whose infrastructure is trusted when sensitive public data is involved.
According to Reuters, draft cloud rules tied to the plan could introduce strict criteria for highly critical public tenders that would make life harder for Amazon Web Services, Microsoft Azure and Google Cloud. That does not mean Europe is banning American hyperscalers. It means Brussels wants procurement officers to look beyond price and ask harder questions about ownership, legal exposure, supply chains, software control and where data is actually processed.
The Commission's own framing is more careful. It says the Cloud and AI Development Act is designed to strengthen Europe's cloud and AI ecosystem while keeping most of the market open to partners. That distinction matters. Europe still needs American cloud platforms, Nvidia chips, global software vendors and foreign capital. But for the most sensitive uses, it wants a stronger European option.
The most practical part of the proposal is data center capacity. The Commission says the Act aims to at least triple the EU's data center capacity within the next 5 to 7 years and fully meet the needs of European businesses and public administrations by 2035. It also wants to simplify permitting, improve access to land, energy, water and financing, and push energy-efficient cooling and power management.
That is where the story becomes less abstract. AI needs power, chips, cooling, land and grid connections. If Europe wants Mistral AI, Aleph Alpha, industrial AI developers and public sector users to run more workloads closer to home, it cannot rely only on privacy law. It needs physical capacity.
There is also a harder energy question underneath this plan. Europe is already dealing with grid pressure and high industrial power costs. Data centers may be essential infrastructure, but they are also large energy users. The Commission is trying to square that circle by favouring sustainable facilities and tying digital infrastructure into broader energy planning. Investors should watch this closely, because access to power may become as important as access to customers.
The sovereignty framework gives public buyers a more practical language for that choice. The Commission's Cloud Sovereignty Framework uses Sovereignty Effectiveness Assurance Levels, from SEAL-0 to SEAL-4, and an overall score based on 48 criteria across strategic, legal, data and AI, operational, supply chain, technological, security, compliance and environmental objectives. At the higher levels, the test moves beyond where data sits and asks whether technology, operations and dependencies are actually under European control.
Cloud vendors now have to prove control
This is a direct challenge to sovereignty washing. For years, large foreign providers have offered European regions, local subsidiaries and partnerships as proof that customer data is protected. European rivals such as OVHcloud, Nextcloud and Proton argue that this is not enough if ultimate control remains outside Europe and foreign legal orders can still reach the provider.
The Commission has already tested this idea in procurement. In April, it awarded a sovereign cloud contract worth up to 180 million euros for EU institutions, bodies, offices and agencies, using the Cloud Sovereignty Framework. The selected providers included Post Telecom with OVHcloud and CleverCloud, STACKIT, Scaleway and a Proximus-led group using services from S3NS, a Thales and Google Cloud joint venture.
For AWS, Microsoft and Google, the likely response is not retreat. It is repositioning. Expect more European partnerships, more local control structures, more promises around encryption and operational separation, and more lobbying over what counts as sovereignty. The hyperscalers have the scale, tools and developer ecosystems that European buyers still want. The question is whether they can satisfy the top assurance levels without giving up the control that makes their platforms work globally.
For European cloud providers, this is a rare opening. OVHcloud and others have long argued that public money should not deepen Europe's dependence on foreign infrastructure. If the new rules reserve or strongly favour sovereign capacity for critical public workloads, smaller European players could gain demand they could not win on scale alone. The risk is that they inherit a compliance advantage without enough capital to match the performance customers expect.
Chips Act 2.0 widens the same argument into semiconductors. The Commission says the proposal will strengthen the European semiconductor ecosystem, reduce strategic dependencies and support advanced chip production in the EU. Europe has strengths in parts of the value chain, especially through companies such as ASML, but it remains exposed in advanced manufacturing and design. AI makes that weakness more visible.
The package still has to move through the political process, where ambition often meets national interest, budget limits and pressure from trading partners. Still, the direction is clear. Europe is trying to turn sovereignty from a defensive slogan into a buying rule, an investment signal and an infrastructure plan. The companies that adapt early will not just sell compliance. They will sell trust, capacity and control in a market where all three are becoming strategic assets.
Also read: Google must give UK publishers a real AI search opt out • ChatGPT reaches one billion monthly app users faster than any rival • BlackRock's Atlas pause exposes Brazil's clean power bottleneck
