Everyone is talking about the sovereign cloud, and for good reason: Companies face the challenge of storing data securely within the EU while meeting regulatory requirements and maintaining flexibility. The sovereign cloud is the key to achieving this.
19 December 2025 – Christian Mennrich-Ketelsen / Patrick Carl
Put simply, a sovereign cloud is a special form of cloud computing that helps companies comply with the laws and regulations of their country or region. In contrast to the traditional public cloud, where data is often distributed worldwide and stored outside the company’s own country, companies with a sovereign cloud can retain control over their data and manage it securely while complying with all legal requirements.
Sovereign cloud solutions enable companies to store data within Europe, collaborate with regional partners, and integrate security and compliance measures into the cloud architecture from the outset. Key elements of a sovereign cloud include:
Data security is of the utmost importance when working with sensitive data. This is precisely why public sector organisations need a sovereign cloud, which ensures the highest standards of data protection, compliance and IT security. The sovereign cloud fosters trust by protecting citizen data, meeting legal requirements and enabling administrations to develop secure, European-based digital solutions for the future.
The sovereign cloud offers organisations and public institutions new perspectives on digital processes. It is considered the solution for secure and independent digitalisation in the public sector. However, as with any new technology, there are risks as well as opportunities that must be carefully considered:
| Risks associated with the sovereign cloud | Opportunities associated with the sovereign cloud |
|---|---|
| Initial investment in infrastructure and migration | Full data sovereignty: clients retain control over their data |
| Limited selection of specialised providers | Highest level of compliance: GDPR and eIDAS conformity, fulfilment of national requirements |
| Potential complexity when transitioning from existing on-premises systems | Strengthening trust among citizens and partners through transparent data processing |
| Ongoing need to adapt to new legal requirements | High security through encrypted data storage, zero-trust architectures and audits |
| Future-proofing, providing a basis for modern digital administrative processes such as document management, contract management and incoming invoice processing | |
| Innovative strength: Use of new technologies (e.g. AI, automation) on a secure basis | |
| Sustainability: Optimised use of resources and long-term cost efficiency |
A sovereign cloud is essential for companies and public authorities to design trustworthy processes. With the EU Data Boundary, Microsoft ensures that customer data is stored securely and exclusively within the EU. Close cooperation with European partners ensures the consistent implementation of regional regulations and security standards. Strict compliance and governance rules maximise transparency and trust, and are supported by the Microsoft Digital Resilience Commitment, which guarantees security, data protection and continuous availability. Microsoft supports companies and public authorities in using the cloud with confidence, minimising risks and securely driving forward digital transformation.
Get started today with a consultation and pave the way for an efficient cloud-based document management system (DMS).
Patrick Carl
Chief Sales Officer
Email: info[at]portalsystems.de
The sovereign cloud is generating high expectations, particularly within sensitive industries. But how realistic is it that it will solve all compliance issues, and what should CIOs be aware of when planning the switch? Patrick Carl, CSO of Portal Systems, sheds light on the opportunities, challenges and real benefits of sovereign cloud offerings.
Question: Many hope that the sovereign cloud will solve all compliance issues. Is that a realistic expectation?
Patrick Carl: No. The cloud offering is just one part of a bigger picture, and it’s not the whole solution. Internal technical and organisational measures, internal processes, and authorisation management, for example, must also be properly regulated.
Question: Based on your projects, what are the biggest obstacles when public authorities or companies want to use sovereign cloud offerings?
Patrick Carl: The decisive factor is whether these offerings are competitive. In terms of both functionality and economics. This was not the case with Germany Cloud a few years ago, so customers did not adopt it and stuck with the standard offering.
Question: What advice would you give to a CIO in the public sector who is currently considering switching to a sovereign cloud?
Patrick Carl: It depends on the initial situation. Some public sector organisations already use M365. There may be areas that have been excluded so far which could be covered by a sovereign cloud. If an organisation has avoided the cloud so far, a sovereign cloud could be a good way to start using it.
Question: Do you think the sovereign cloud will become the standard model in Europe, or will it remain a niche solution for sensitive industries?
Patrick Carl: That’s an interesting question. Microsoft and its partners have learned from their failure a few years ago. Whether the new offering will be competitive is up to customers. If enough of them opt for it, it will be a success. However, I don’t see it becoming the standard. Microsoft’s existing offering is already excellent, and customers can use it with confidence.
Cloud technologies allow companies to future-proof their IT infrastructures and business models. Those that plan their cloud implementation strategically benefit from greater efficiency, security and control. The following points demonstrate how to achieve a successful cloud strategy:
Shareflex® Documents
With Shareflex Documents you get a tailor-made solution for process and document management with SharePoint and Microsoft 365.
Sovereign cloud offerings provide opportunities for greater security, compliance and control. However, success depends on strategic implementation. Companies that migrate applications in a targeted manner, apply modern development principles and ensure digital sovereignty can increase their efficiency and security. Clear data sovereignty and coordinated processes can overcome reservations and allow you to exploit the full added value of the cloud. This means that the cloud becomes a sovereign partner in your corporate cosmos, not just part of the IT infrastructure.
A sovereign cloud stores data exclusively in the EU, uses European partners, and meets strict compliance and governance requirements. It guarantees transparency, control over data, and compliance with legal requirements.
The sovereign cloud minimizes risks posed by laws such as the US Cloud Act, as data sovereignty and control remain with European customers. External access from non-EU countries is therefore severely restricted.
Hamburg, 19 December 2025
Author: Christian Mennrich-Ketelsen
Please feel free to share this article:
2025 adobe.stock
Cloud, yes, but in a sovereign way: DMS with Microsoft and EU compliance.