Quantified observatory of digital sovereignty
How dependent is Europe on non-European digital actors? We have aggregated public reference figures on the cloud market, the legal framework, EU initiatives and business perception.
How to cite this page
All data is aggregated from third-party public sources and published under Creative Commons CC BY 4.0 license — free citation with attribution. Each figure links back to its original source.
Source: Certyneo, "Digital Sovereignty Observatory", https://certyneo.com/en/observatoire-souverainete-numerique, accessed on [date]. CC BY 4.0 License.Data aggregated from third-party public sources (each figure is linked to its source). Annual refresh. For any editorial questions, contact the team via /contact.
Dependence on American cloud
6 figures
The dominance of American hyperscalers on the European cloud market, in market share and euros.
70%
share of the European cloud market captured by the three American hyperscalers (Amazon, Microsoft, Google)
Alone, these three American players concentrate 70% of the regional market, on a rapidly growing European market.
Synergy Research Group, H1 202515%
cumulative market share of all European cloud providers on their own continent
This share fell from 29% in 2017 to 15% in 2022 and has stalled since; SAP and Deutsche Telekom, the leading Europeans, each hold 2%.
Synergy Research Group, H1 202563%
global share of cloud infrastructure spending captured by Amazon (29%), Microsoft (20%) and Google (13%)
Concentration in favor of the three American leaders is growing slowly (61% two years ago, 63% at Q3 2025).
Synergy Research Group, T3 202552.7%
share of EU enterprises using paid cloud services in 2025
Up 7.4 percentage points from 2023, compared to only 17.8% in 2014: cloud usage is becoming entrenched in the European economy.
Eurostat, 202583%
share of European spending on professional software and cloud services that goes to American companies
Out of approximately €400 billion in B2B spending in Europe, 83% (≈ €330 billion) is captured by American players.
Cigref / Asterès, avril 2025264Md€
annual amount of software/cloud dependency directly benefiting the American economy
The study estimates the impact of this dependency at approximately 2 million American jobs; without action, it could reach €500 billion by 2032.
Cigref / Asterès, avril 2025
Legal framework & data transfers
3 figures
Cloud Act, FISA, GDPR and Schrems II: the conflict of laws that exposes European data.
16 Jul 2020
year in which the EU Court of Justice invalidated the Privacy Shield governing data transfers to the United States
The Court ruled that American surveillance (FISA 702, EO 12333) does not guarantee protection equivalent to GDPR; this is the 2nd invalidation after Safe Harbor (2015).
CJUE, arrêt C-311/18 « Schrems II »10 Jul 2023
year of adoption of the new EU-US Data Privacy Framework authorizing data transfers to the United States again
Successor to the Privacy Shield, this framework remains contested and could meet the fate of its predecessors ("Schrems III").
Commission européenne, décision d'adéquation 2023/17951.2Md€
fine imposed on Meta for illegal transfers of Europeans' data to the United States
GDPR's absolute record, this sanction illustrates the concrete legal risk of transatlantic transfers outside a valid framework.
Data Protection Commission (Irlande), mai 2023
European responses
3 figures
eIDAS 2.0, European identity wallet and Digital Decade 2030 objectives.
2,024
year of entry into force of eIDAS 2.0 regulation creating the European digital identity framework
eIDAS 2.0 establishes the legal basis for the European digital identity wallet (EUDI Wallet) and digital identity sovereignty.
Règlement (UE) 2024/1183 (eIDAS 2.0), EUR-Lexend 2026
deadline by which each Member State must provide a digital identity wallet (EUDI Wallet) to its citizens
The 27 Member States must offer an interoperable wallet by end of 2026, a sovereign alternative to American platform identities.
Commission européenne — European Digital Identity80%
target of European citizens using an electronic identity solution (eID) by 2030
Target set by the 2030 Digital Decade; the EUDI Wallet is the instrument intended to drive this mass adoption.
Programme d'action pour la Décennie numérique 2030 (Conseil de l'UE)
Business perception
4 figures
What French CIOs and CISOs declare about sovereignty and their dependencies.
79%
share of French companies for whom digital sovereignty is a criterion for choosing an IT solution
Annual Hexatrust survey of 96 CIOs and security directors: sovereignty is now a majority purchasing criterion.
Baromètre souveraineté Hexatrust 2025 (96 DSI/RSSI)1 in 2%
share of companies that have already ruled out a technological solution due to lack of sovereignty
One company out of two has already abandoned a non-sovereign tool: preference translates into purchasing decisions.
Baromètre souveraineté Hexatrust 2025 (96 DSI/RSSI)16%
share of organizations that actually analyze their digital dependencies on foreign technologies
The sovereignty paradox: awareness is widespread, but concrete measurement of dependencies remains rare.
Baromètre souveraineté Hexatrust 2025 (96 DSI/RSSI)40%
share of companies not monitoring French or European solutions
Nearly 40% do not monitor the existing sovereign offer, which perpetuates default dependency.
Baromètre souveraineté Hexatrust 2025 (96 DSI/RSSI)
Methodology
These figures are AGGREGATED from public third-party sources (Synergy Research Group, Eurostat, European Commission, CNIL/ANSSI, Cigref-Asterès, CJEU, Irish DPA, Hexatrust barometer). This is NOT a Certyneo survey. Each statistic links back to its named and dated source, with the original URL, to be verifiable and citable.
Learn more
Choose a sovereign solution
eIDAS electronic signature hosted in the European Union. Free plan, no credit card required.