A recent report from a European institution has raised alarms that over three-quarters of European nations utilize cloud services provided by American companies for critical national security operations. This dependency could potentially threaten the security of European countries.
The report highlights high risks associated with U.S. reliability. According to findings by the Technology Prospects Institute based in Brussels, Belgium, 23 out of the 27 EU member states and the United Kingdom appear to depend on American technology for their national security systems.
Researchers analyzed publicly available information, including defense ministry websites, state media, and public procurement records from the EU and UK, to examine cloud service contracts with U.S. tech firms such as Microsoft, Alphabet, Amazon, and Oracle.
The institute identified 16 countries at high risk of having critical cloud services unilaterally cut off by the U.S. at any time. These nations include major European military powers like Germany and the UK. Only Austria, which maintains a policy of neutrality, was categorized as low risk.
As transatlantic relations show increasing strain, European governments are growing more concerned that escalating tensions with a potential future U.S. administration could lead to a "kill switch" being activated on vital digital services. An incident in February of last year, where the U.S. halted support to Ukraine—including satellite imagery from Maxar Technologies—following a heated dispute, is cited as a precedent.
A researcher from the British think tank Chatham House commented, "If such actions can be taken against Kyiv, they could also be directed at London, Brussels, Paris, or Berlin. There is a pressing need to recognize this as a critical national security risk."
A researcher from the Technology Prospects Institute added, "We have witnessed a U.S. president threatening Denmark and Greenland... This shift in geopolitics must be taken into account."
In response, some European countries have begun seeking cloud technology services sourced locally or within Europe, pressuring American companies to offer so-called "sovereign" cloud solutions. However, the institute warns that security labels promoted by U.S. firms do not mitigate the risks, as these services may still fall under U.S. regulations like the CLOUD Act, which permits the U.S. government to demand data stored overseas. Additionally, American companies could be compelled to suspend maintenance and security updates due to U.S. government sanctions.
The European Union has not been idle in addressing these technological dependencies. In recent years, the European Commission has introduced regulations such as the Digital Markets Act to reduce reliance on foreign platforms and foster competition within Europe. In March of last year, the Dutch parliament passed several motions urging the government to decrease dependence on U.S. cloud services and accelerate investment in Dutch and European alternatives.
The report notes initial steps taken by European countries to reduce American reliance. For instance, Italy's Ministry of Defense and the German state of Schleswig-Holstein have transitioned to open-source software. The Netherlands is collaborating with domestic telecom Royal KPN and French company Thales to develop its own defense cloud system.
Despite these ambitious efforts, Europe's entrenched "path dependence" on U.S. cloud technology presents significant obstacles to achieving digital sovereignty. Recent disputes between the EU and the U.S. over digital sovereignty have intensified, with the U.S. imposing visa restrictions on European advocates in 2025, escalating the conflict from policy disputes to personal pressure.
The founder and CEO of Dutch cloud provider Intermax Group noted last year that system migrations typically take six months to three years. Many government departments are deeply integrated into the Microsoft ecosystem, even prioritizing hiring staff skilled in Microsoft technologies. These departments now find themselves in a difficult position, heavily locked into American systems.
Comments