EUROPEAN SOVEREIGN CLOUD: HOW ESC PROVIDERS ARE CATCHING UP WITH THE HYPERSCALERS

Contents

1. The catalyst: Why ESC providers are gaining in importance right now
2. Feature development: From gaps to comprehensive coverage
3. Key features introduced in 2025/2026
4. Where gaps still remain
5. Competitive Positioning: Where is the Edge
6. The Trend: Feature Convergence, Production Readiness and Trust
7. Outlook
8. Conclusion

The Catalyst: Why ESC providers are gaining in importance right now

The CLOUD Act effect

The US CLOUD Act (Clarifying Lawful Overseas Use of Data Act, 2018) empowers US law enforcement agencies to compel US-based cloud providers to hand over data. This applies regardless of where this data is stored and irrespective of local data protection laws. For European companies, this creates a fundamental conflict with the GDPR and national requirements regarding data sovereignty.

What has changed by 2025/2026 is not the law itself, but awareness and the regulatory climate:

• The aftermath of Schrems II persists: the EU–US Data Privacy Framework remains politically fragile. European data protection authorities are taking an increasingly critical view of reliance on US cloud services in regulated sectors.
• Public sector requirements: The BSI C5 certification in Germany, the SecNumCloud qualification in France and comparable national frameworks are becoming prerequisites for contracts in the public sector and for critical infrastructure. ESC providers come with these certifications as standard.
• Risk awareness at board level: The combination of geopolitical tensions, changing US executive orders on data access and increasing regulatory enforcement has transformed cloud sovereignty from a mere compliance tick-box exercise into a strategic risk issue.

The result: European companies that previously dismissed ESC providers as ‘not yet ready’ are now actively evaluating them. It is evident that the feature gap has narrowed significantly.

Market dynamics

ESC providers are no longer niche alternatives. They are backed by major European conglomerates (Schwarz Group/STACKIT, Deutsche Telekom/OTC, United Internet/IONOS, OVHcloud SAS/OVHcloud) and positioned as strategic infrastructure for Europe’s digital independence. Investment is rising, product roadmaps are ambitious, and the customer base is expanding beyond the public sector into financial services, healthcare and industrial sectors.

Feature development: from gaps to comprehensive coverage

The starting point around 18 months ago (early 2025)

At the start of 2025, ESC providers exhibited significant gaps in what hyperscaler customers regard as basic functionality:

Current status (mid-2026)

The transformation is impressive, as significant gaps have been closed:

Items marked in bold indicate features that were introduced or significantly enhanced during the period 2025–2026.

Key features introduced in 2025/2026

NoSQL becomes the standard on ESC platforms

Arguably the most significant development: all four providers now offer managed NoSQL databases — that is, databases specifically designed for flexible, unstructured data, such as that found in product catalogues, search applications or IoT scenarios. IONOS has launched its own managed service based on MongoDB DBaaS, STACKIT has introduced MongoDB Flex and OpenSearch, and OVHcloud has rolled out services based on MongoDB and Cassandra, all utilising established open-source technologies. The product names vary from provider to provider, but the underlying technology is similar. Until now, companies had to either turn to hyperscalers for such use cases or operate the databases themselves — both of which stood in the way of the goal of sovereign cloud usage. The new managed offering removes this obstacle.

CDN coverage is now comprehensive

STACKIT and IONOS have launched CDN services, meaning that all four ESC providers now offer content delivery functionality. Although the number of delivery locations is still smaller than that of Cloudflare or AWS CloudFront, the availability of CDN as a fully operational service means that web applications no longer require third-party CDN providers outside the sovereign infrastructure.

AI and LLM serving as a sovereignty advantage

This is the most dynamic area of ESC development. Three out of four providers now offer managed LLM serving using open-source models such as Llama and Mistral:

• STACKIT AI Model Serving: Fully managed inference for Llama, Mistral and other models, complemented by AI Model Experiments (MLOps) and GPU compute.
• OVHcloud AI Endpoints: API-first access to pre-trained models, including Mistral and Llama, plus a complete AI lifecycle stack with notebooks, training and deployment.
• IONOS AI Model Hub: GDPR-compliant access to open-source LLMs with a focus on ease of use.

This is strategically significant: businesses can now run AI workloads on European infrastructure without having to send data to US-controlled model APIs. OTC remains the exception here. Whilst ModelArts is available for in-house ML, a native LLM-as-a-Service is lacking.

Event streaming and messaging

IONOS has entered the event streaming sector with Managed Apache Kafka (Event Streams), whilst STACKIT has expanded its messaging capabilities with STACKIT Intake, a Kafka-based data ingestion service. These additions are crucial for modern software architectures and real-time data processing.

Observability stacks are maturing

All providers have moved beyond simple monitoring:

• STACKIT offers a comprehensive observability stack based on Grafana, Prometheus, Loki and Tempo. This is comparable to what teams would host themselves on hyperscalers.
• IONOS has introduced Monitoring as a Service and a dedicated logging service.
• OTC offers Cloud Eye, Log Tank Service and integrated alerting.
• OVHcloud is continuing to develop its Logs Data Platform and Metrics Data Platform.

Developer Experience and IaC

All four providers now offer Terraform providers, CLIs and REST APIs. STACKIT stands out with SDKs in three languages (Go, Python, Java), a dedicated CLI and comprehensive API documentation. This maturity in developer tools signals a shift: away from manual management via web interfaces, towards the programmatic control of cloud infrastructure.

Where gaps still remain

Despite rapid progress, ESC providers still lag behind the hyperscalers in some areas:

Competitive Positioning: Where is the Edge?

Each ESC provider has developed its own distinct profile:

STACKIT (Schwarz Group)

Strengths: Fastest product roadmap. Broadest AI/ML stack amongst ESC providers. Robust developer tooling with three SDKs, a CLI and a comprehensive API. Unique offerings such as Dremio Lakehouse, confidential computing and edge cloud.

Profile: The best choice for organisations seeking an experience as ‘hyperscaler-like’ as possible on their own infrastructure.

Open Telekom Cloud (Deutsche Telekom / T-Systems)

Strengths: The most comprehensive feature set overall, particularly in Big Data (MRS, DLI), serverless (FunctionGraph) and enterprise services. The widest range of compliance certifications. Three EU regions (DE, NL, CH).

Profile: The best choice for large enterprises requiring a broad range of services and a strong compliance position.

IONOS Cloud (United Internet)

Strengths: Competitive pricing, particularly for compute and storage. Clean, API-first architecture. Strong bare-metal offering. Rapid expansion of managed services.

Profile: The best choice for cost-conscious teams and SMEs migrating from traditional hosting.

OVHcloud (OVHcloud SAS)

Strengths: Europe’s largest European-owned infrastructure. Strong bare-metal heritage. SecNumCloud certification in France. Growing AI portfolio with AI endpoints.

Profile: The best choice for organisations requiring a European hyperscaler alternative with a global data centre presence.

The trend: feature convergence, production readiness and trust

Feature convergence

The data shows that ESC providers now offer competitive services. With this newly established baseline capability, most companies can handle 80–90 per cent of their key IT tasks. The argument that key features are missing and that there is therefore no alternative to the hyperscalers is no longer valid. Managed Kubernetes, managed databases (SQL and NoSQL), object storage, CDN, load balancing, observability and AI serving are now standard features in the ESC landscape.

Production Readiness

Maturity is not limited to feature checklists. ESC providers are investing in:

• High availability: Operations across multiple data centres, cross-site data backup and disaster recovery are now standard. STACKIT and OTC offer dedicated disaster recovery services.
• Cost transparency: All providers now offer cost overviews and interfaces for billing management. STACKIT’s FOCUS-based reporting is particularly advanced in this regard.
• Security features: Key management, secure storage of access credentials (STACKIT), web protection (OTC), defence against denial-of-service attacks (all providers) and logging of security-related events are becoming standard features.

Trust

ESC providers benefit from a growing level of trust that hyperscalers cannot offer:

• Data Residency Guarantees: Due to the architecture, data remains within EU jurisdiction. This is ensured by design, not merely through policy configuration.
• No CLOUD Act Exposure: European-owned and operated, with no US parent company that could be compelled to hand over data.
• Certification Alignment: BSI C5, SecNumCloud and other EU-specific certifications are built in natively and not added as an afterthought.
• Operational sovereignty: Not only data sovereignty, but also control over the entire operations stack. Support, incident response and infrastructure management remain with European companies.

Outlook

The ESC market will reach a turning point in 2026. Providers have largely answered the question: ‘Can we run our workloads here?’ The next phase will centre on the following topics:

1. Serverless and event-driven architectures: The biggest remaining gap. A compelling FaaS offering would open up access to cloud-native workloads, which today are still heavily reliant on hyperscalers.
2. AI Sovereignty: With the EU AI Act now in force, running AI workloads on European infrastructure using transparent open-source models will become a regulatory advantage rather than merely a preference.
3. Multi-cloud and interoperability: ESC providers are well positioned for multi-cloud strategies. Terraform support, OpenStack compatibility (OTC, OVHcloud) and standardised APIs make them natural complements or alternatives for hyperscaler workloads.
4. Ecosystem Growth: The missing piece of the jigsaw is a vibrant ISV and SaaS ecosystem. Partnerships, marketplaces and managed partner services will determine which providers make the leap from infrastructure to platform.

💡 Further articles on the European Sovereign Cloud: Part 1 – Control, Dependencies and Risks and Part 2: Cloud Services in Practice – Feature Set and Portability

Conclusion

European Sovereign Cloud providers are no longer a compromise, but a deliberate strategic decision. The feature gaps that argued against their adoption just 18 months ago have largely been closed. With managed databases, CDN, AI serving and mature observability stacks, ESC providers now cover the majority of enterprise requirements.

This offering comes at a price: for comparable configurations, ESC providers are often significantly more expensive than the hyperscalers. Economies of scale, global infrastructure and aggressive discount models (Reserved Instances, Committed Use Discounts) give AWS, Azure and GCP a structural cost advantage that European providers have so far been unable to match.

However, this is offset by something no hyperscaler can deliver: full data sovereignty without exposure to the CLOUD Act, native EU certifications and operational control in European hands. For organisations subject to the GDPR, operating in regulated sectors or seeking to reduce geopolitical risks in their cloud infrastructure, the ESC option is now mature, trustworthy and competitive. The additional costs are not a weakness, but rather the price of digital sovereignty — and thus an investment in regulatory security and strategic independence.

Do you have any questions or require assistance?

You can find out more about the possibilities of cloud transformation on our website.