The debate over digital sovereignty in Europe has left the backrooms and stepped directly into the spotlight. A recent admission from Microsoft France has sparked new doubts over whether customer data hosted by foreign providers can truly remain secure. During a public hearing, a company executive admitted he could not guarantee that data belonging to French citizens would stay beyond the reach of the US government.
For many observers, the statement confirmed long-held suspicions. “They finally told the truth,” said Solange Viegas Dos Reis, Chief Legal Officer at OVHcloud. She explained that years of reassurances left customers unsettled once the response revealed that providers could in fact disclose sensitive data. The remark immediately fueled a wave of questions from organizations now rethinking how they manage critical information.
Part of the problem comes from how loosely people define sovereignty itself. Viegas Dos Reis identifies three pillars that give the concept structure: data sovereignty, which ties information to the laws of the country where it resides; technical sovereignty, which ensures the ability to move workloads freely across providers; and operational sovereignty, which deals with who actually accesses the data in practice. She argues that these layers all connect to customer choice and protection, making sovereignty far more than a marketing slogan.
At the same time, mounting concerns about the dominance of global hyperscalers, the unpredictability of US policy, and the fast-moving rise of AI are intensifying the urgency of the issue. European leaders are responding with more deliberate strategies. Many are mapping their workloads carefully, deciding which applications can run safely on global clouds without compliance risks, and which must remain with European vendors or secured in on-premises environments. The process will take time, Viegas Dos Reis concedes, but she believes the shift is already underway.
Ultimately, sovereignty comes down to trust. As enterprises and governments evaluate their exposure to external influence, momentum is building behind sovereign approaches. That growing sensitivity is likely to shape Europe’s cloud landscape for years to come.
