Andrea Margiovanni .it

Airbus and European Sovereign Cloud: The First Credible Signal of an Awakening?

A few days ago I read a piece of news that probably went unnoticed by many, hidden among the geopolitical and tech headlines.

A few days ago I read a piece of news that probably went unnoticed by many, hidden among the headlines on geopolitics and technology. Airbus, the European aerospace and defence giant, is preparing a tender worth more than €50 million to move its most critical applications to a “truly sovereign” European cloud. I read it almost by accident, scrolling sector news the way I often do early in the morning, when my head is still clear enough to catch the details that otherwise slip past.

It isn’t a technical story, let me say that up front. It’s a story of industrial strategy, of geopolitics, of how Europe is starting to look around and ask whether it’s really forced to depend on American Big Tech. And I’ll admit that as I read the details, the question came naturally: is this the first credible signal of a possible European awakening, or are we watching another big promise on its way to a drawer full of good intentions? The answer, unfortunately, isn’t obvious. And maybe that uncertainty is exactly what makes the story interesting.

What Airbus Is Putting on the Table

To understand why Airbus made this move, you have to know what it’s putting on the table. We’re not talking about ordinary data, emails or spreadsheets. We’re talking about mission-critical systems that touch the foundations of the company: resource management, manufacturing execution systems, customer relationship management, and especially PLM, the product lifecycle management software that contains all the design data for the aircraft. These aren’t details. They’re the industrial secrets, the blueprints, the innovations that make Airbus what it is.

Catherine Jestin, executive vice president for digital affairs, said it plainly:

we’re talking about information that is extremely sensitive from a national and European point of view. We want to ensure it remains under European control.

There’s a detail that struck me, and it reveals more than it seems at first glance. Airbus itself estimates only an “80% probability” of finding a fully European provider that meets the technical and security requirements. A company that wants to entrust itself to Europe candidly admits it might not find anyone able to do it.

I don’t know about you, but that gives me a lot to think about. On one side there’s the courage to look for an alternative, on the other the bitter awareness that the alternative might not exist.

The CLOUD Act and Non-Negotiable Sovereignty

If I asked you why Airbus doesn’t simply use Amazon Web Services, Microsoft Azure, or Google Cloud, many would probably answer that they’re the best, the most reliable, the ones with the most advanced technology. And you’d be right. They are all of those things. But there’s a bigger problem, called the CLOUD Act. It’s a 2018 American law that essentially allows U.S. authorities to request data directly from American cloud providers, regardless of where the servers are. Even if your data is hosted in a Frankfurt data centre, Microsoft could be legally compelled to hand it over to the U.S. government if there’s a legal order. No international treaty needed. No diplomatic procedure. American law simply prevails.

I’ve spent a lot of time studying this. At first it sounded almost like an exaggeration, one of those concerns of the privacy paranoid. Then I started to see the practical implications, to understand what it means for a European company working in defence, aerospace, sensitive technology. It’s a thorn you can’t ignore. And Trump’s return to the White House has amplified that concern. I’m not saying Trump will do something strange tomorrow, but the uncertainty around transatlantic relations, tariffs, possible federal shutdowns that could halt services, has set off alarm bells across Europe. Digital sovereignty is no longer an elegant phrase to drop into strategic documents. It has become a question of control over data, over what stays in your hands and what doesn’t.

The European Provider Desert

Here, though, the frustrating part of the story begins. If you ask Airbus who the European candidates are to handle this infrastructure, the list isn’t long or comforting. There’s OVHcloud, the French provider trying to position itself as a serious European alternative. Deutsche Telekom, through its T-Systems division. Scaleway, another French option. SAP, which is developing sovereign cloud platforms. And then Orange, Telecom Italia, and a handful of smaller national players.

And the numbers hurt. According to recent data, European providers control only 15% of the overall cloud market in Europe. Just 15%. While Amazon, Microsoft, and Google together control 70%. SAP and Deutsche Telekom, the two European leaders, each have a 2% market share. OVHcloud, with all its ambition, operates in 12 regions worldwide. AWS operates in 105 availability zones across 33 regions. The technological and scale gap is simply enormous, and it’s unclear to me how it can be closed in any reasonable timeframe.

And then there’s the GAIA-X precedent, which still stings when I think about it. If you remember, GAIA-X was the project launched with great fanfare in 2019 by France and Germany to create a sovereign European cloud infrastructure. It was Europe’s answer to the American giants. It was supposed to be the Airbus of data, the project that would finally pull Europe out of digital subordination. You know how it ended? Done. Dead. Not for technical reasons but for political ones. France dreamed of a national champion protected by the state, an upgraded OVHcloud. Germany wanted something more open, more federal, more standards-driven. In the squabble between the two, they left openings where Microsoft, Google, Amazon, and even Palantir slipped in. What was supposed to be a European alternative to the American giants became a bureaucratic standardisation lab, completely disconnected from the real market. While GAIA-X committees discussed norms, European companies kept signing billion-euro contracts with American providers.

That precedent weighs like a stone on any conversation about European digital sovereignty. And it’s a warning Airbus knows well.

The Palantir Paradox

There’s something else worth raising, something that emerges between the lines of this whole story. Something no one wants to name explicitly, but which is the real knot. Yes, you can move the infrastructure to Europe. You can have European data centres, European governance, everything you want. But once the data is there, where does it go to be analysed, understood, turned into intelligent decisions?

Because Airbus, since 2015, has worked with Palantir to analyse aircraft data. They have a partnership called Skywise that uses Palantir’s technology to do extraordinary things: identify factory defects on the A350, predict maintenance, optimise workflows. They’ve cut delivery times by 33%. It’s an impressive result. But Palantir is American. And there’s no European equivalent of Palantir.

Here’s the paradox that gives me pause: you can move the infrastructure, you can have sovereign cloud, but many of the advanced services—AI, next-level analytics—still sit in American hands. It’s like building a European fortress and then discovering the key to the most important room is still held by Americans. I often wonder whether this isn’t the real dependency Europe struggles to free itself from. Not so much the servers, but the brains. Not so much where the data sits, but who knows how to read it.

Credible Signal or Rhetorical Exercise

Let me try to look at it from both sides, because it would be intellectually dishonest to do otherwise.

On one hand, when Airbus—a company of Airbus’s stature—sends such a clear signal to the market, it starts to create demand that wasn’t there. Companies move when they see money and commitment from large players. Airbus’s choice arrives in a context where other movements are happening: the European Data Act aimed at reducing American lock-in, EU military projects on combat cloud, the investments SAP and Deutsche Telekom are making on sovereign cloud. Other stories are emerging. Public administrations, German agencies, governments starting to migrate off Microsoft services. It isn’t a tsunami, but it’s a movement. There’s awareness that depending entirely on three American companies is a risk.

On the other hand, €50 million over ten years is more a political signal than a transformative tipping point for a sector worth tens of billions. The European cloud market reached around €61 billion in 2024 and grew even faster in 2025. €50 million is 0.08% of that market. A drop in the ocean.

The gap between European providers and the American giants is enormous and doesn’t close fast:

American hyperscalers invest around €10 billion every quarter in capex in Europe. That’s a threshold that looks impossible to cross for any European company.

Without drastic change, real alliances, perhaps strategic consolidation, and genuine European industrial integration, the risk is another GAIA-X case: big promises, limited impact. And that’s certainly worrying.

What I’ll Watch in the Coming Years

If I want to know whether the Airbus case really is the start of an awakening, I already know what I have to watch in the coming years.

First: will other large European groups make similar choices? Defence, energy, utilities, banking. Will they start shifting critical workloads to European cloud? If only Airbus does it, we’re looking at an interesting but irrelevant exception.

Second: will real consolidation happen among European providers? Or will we keep seeing fragmentation of national solutions, each serving its local market? Because size matters, and 15 small European players will never compete with three global giants.

Third: how do European regulators react? And how do American hyperscalers’ sovereign cloud offerings evolve? Because AWS, Microsoft, and Google have already worked out which way the wind is blowing. They’re offering sovereign cloud services, guaranteeing data residency in Europe, creating local partnerships. If they can offer enough European to be enough while keeping their technological superiority, Airbus may stay an elegant but solitary exception.

When I look at this story, I don’t see either the all-black “Europe is lost” or the all-pink “the awakening is here”. I see the first credible signal that something is moving, but also the memory of GAIA-X whispering: careful, this could end badly too.

Airbus has the courage to say out loud “we want European sovereign cloud”. That matters. It’s a signal. But to turn it into real structural change of the market would take a combination of things: serious public investment, consolidation among European players, political courage to protect emerging champions, and a shared vision among European governments of what digital sovereignty really means.

And maybe, more than anything, it would take stopping the bickering between France and Germany every time something has to be built together. Because in the end that’s where everything always gets stuck. It’s always that old European habit of preferring our own national reasons to a common project. And as long as that’s the case, the Americans will always have an advantage that doesn’t depend on technology, but on our incapacity to act as a team.

In the meantime, I’ll read the next few months with great curiosity. Because it doesn’t depend only on Airbus, but on what the others do. And above all on what we Europeans, finally together, will be capable of doing.

Key takeaways

  • Airbus breaks the demand-side stalemate: until now European sovereign cloud was a slogan because no big buyer was actually asking for it.

  • “Sovereign cloud” in the strict sense doesn’t mean data centres in Europe—it means European jurisdiction even in the face of extraterritorial requests.

  • European providers (OVHcloud, StackIT, Scaleway, Aruba) don’t yet have hyperscalers’ scale economics or service catalogue: the gap closes only with heavyweight clients.

  • For an Italian SME the short term doesn’t change; the medium term (18–36 months) starts to weigh on PA tenders and enterprise customers with sovereignty requirements.

  • The reasonable defensive move today is a serious abstraction layer (Terraform, Kubernetes, open standards) so you don’t end up captive to a provider.

Questions & answers

Why does Airbus's choice on European sovereign cloud matter?

Because it’s one of the first major European companies with serious strategic requirements (aerospace, defence) to announce a systematic exit from the three American hyperscalers to migrate to European infrastructure. It isn’t a symbol—it’s a deal worth billions over long timelines that, if it materialises, changes the investment pipeline for European providers (OVHcloud, StackIT, Scaleway, Aruba) and makes an alternative economically sustainable.

What does "sovereign cloud" mean in the strict sense?

A cloud whose data stays under European jurisdiction even in the face of extraterritorial requests (CLOUD Act, FISA 702), whose technical supply chain is controllable by European entities, and whose operators aren’t subject to foreign laws that could compel them to disclose data. Data centres in Europe aren’t enough—the three American hyperscalers have data centres in Frankfurt, but they remain subject to the CLOUD Act.

Why has sovereign cloud been more slogan than reality so far?

For three reasons: (1) European providers don’t have hyperscalers’ scale economics, prices are less aggressive; (2) some advanced managed services are missing (ML, specialised databases); (3) European companies have never had coordinated enterprise demand to justify investment. Airbus’s move breaks this stalemate from the demand side.

What changes for an Italian SME using AWS or Azure today?

In the short term, nothing. In the medium term (18–36 months) three vectors start to matter: enterprise and PA clients requiring sovereignty compliance, sectoral regulations adding requirements, European provider pricing becoming more competitive as volumes grow. The advice: serious abstraction layers (Terraform, Kubernetes, open standards) so you aren’t captive to a provider when migration time comes.

The author

Andrea Margiovanni

Andrea Margiovanni

I help public bodies and private organizations read their own infrastructure dependencies. Digital sovereignty is a lattice, not a flag; and it is measured more on contracts than on speeches.

See the guide
© 2026 Andrea Margiovanni Made with care, by hand