Digital Sovereignty Is Changing the Cloud Market
- By Dario Maisto, Forrester
- February 19, 2024
In 2023, global cloud vendors all came up with their own digital sovereignty solutions to address rising concerns from their customers. However, when I ask customers and vendors to define what digital sovereignty means for them, silence is the most common response. The lack of an agreed-upon definition makes the job of cloud vendors harder when they try to come up with "sovereign" IT environments and offerings that satisfy customer demands. This confusion explains why sovereign offerings from hyperscalers and global cloud vendors look very different from one another.
The Forrester report Digital Sovereignty Regulations Constrict Business Agility gives a definition of digital sovereignty. Digital sovereignty concerns the data, hardware, network, and software protections that contribute to defining your sovereign IT landscape in compliance with regulations (see figure below).
Hyperscalers are responding to digital sovereignty demands
Hyperscalers and global cloud vendors' sovereign offerings vary dramatically in how they tackle the digital sovereignty problem. Some focus on a single geographical area or country, while others have global reach. Here is a summary of what is going on in the market:
- Microsoft launches Microsoft Cloud for Sovereignty to cater to the global government sector. On October 3, 2023, Microsoft announced the public preview of the Microsoft Cloud for Sovereignty, which addresses the digital sovereignty needs of public sector organizations. On the upside, Microsoft Cloud for Sovereignty will come at no additional cost for existing customers. Regardless of this new offer, Microsoft is still in the scope of the U.S. CLOUD Act; hence, adoption will depend on how European regulation evolves and whether customers believe the guarantees of the new offering are credible enough to build confidence with their stakeholders and local regulators.
- AWS moves on with its Digital Sovereignty Pledge, focusing on the German market. On October 25, 2023, AWS announced its AWS European Sovereign Cloud, an independent cloud for Europe. AWS's offering is based on two key propositions: 1) keeping all customers' metadata in the E.U.; 2) only E.U.-resident AWS employees who are located in the E.U. have control of the operations and support of the AWS European Sovereign Cloud. However, the huge focus on Germany and German customers means we are not confident recommending it to customers outside of Germany for now. More concerningly, the offering will feature its own billing and usage metering systems, ringing alarm bells for us that AWS intends to charge users a pretty penny for the privilege of using its European Sovereign Cloud.
- Google offers a portfolio of Sovereign Solutions but abandons customers to figure it out. Google Cloud has not yet come up with a comprehensive sovereignty proposition compared to other hyperscalers. The biggest announcement in 2023 was Google Cloud's Digital Sovereignty Explorer, an online tool to help organizations figure out their digital sovereignty requirements. The tool gives recommendations on potentially applicable solutions from Google Cloud and its partners. Google's DIY approach shows a lack of customer care in dealing with customers' concerns regarding digital sovereignty—and we expect customers to react accordingly.
- Oracle focuses on commercial and public sector organizations in Spain and Germany. Oracle EU Sovereign Cloud offers customers access to more than 100 services from its commercial public cloud. Among the positives is that Oracle's customers can leverage OCI services in Oracle EU Sovereign Cloud at the same pricing as Oracle commercial cloud regions. Furthermore, in October 2023, Oracle announced that the European Commission (E.C.) agreed to incorporate Oracle Cloud Infrastructure (OCI) and its platform services into the cloud service offerings available to the E.U. administration. However, Oracle has three key challenges to overcome: 1) Oracle is still in the scope of the CLOUD Act; 2) Oracle lacks several publicly available customer references compared to other providers; and 3) the presence of EU Sovereign Cloud regions only in Spain and Germany leaves customers in other E.U. countries with requirements to store data in the country because of regulatory requirements without a solution.
Digital sovereignty offerings from cloud providers are complicated, and clients need to define their digital sovereignty requirements and approach. Our report for Forrester clients, Digital Sovereignty Regulations Constrict Business Agility, will help customers define digital sovereignty and design an effective approach.
The original article is here.
The views and opinions expressed in this article are those of the author and do not necessarily reflect those of CDOTrends. Image credit: iStockphoto/mdesigner125
Dario Maisto, Forrester
Dario Maisto is Forrester’s senior analyst focusing on digital transformation and the underlying technology platforms. He advises tech executives on how to navigate the complex landscape and emerging opportunities of digital operations platforms as well as cloud solutions and services.