Manifesting in the launch of a “sovereign” European cloud powered by AWS, the global expansion of Amazon risks locking the public sector out of the opportunity to create open, interoperable and internally controlled infrastructure.
Dependency on proprietary hyperscalers like Amazon will strangle local technology, end up controlling and rerouting public spending, and make the state and society vulnerable to blackmail.
A viable strategy to build a naturally sovereign European cloud already exists and should be put into action. It is entirely possible to build local, open-source ecosystems offering government and citizens direct control over data access and security, unmoderated by foreign big tech monopolists.
Issues with growing reliance on Amazon services
Due to Amazon’s monopoly-like role in the global cloud market, the employment of AWS cloud locks the government administrations and the European public sector in general within an externally controlled proprietary framework:
When administrations commit to AWS cloud and the technology behind them, controlled exclusively by Amazon, it would limit the interoperability with the broader ecosystem and consequently lead to further expansion of the technological monopoly.
A massive technological dependency would also mean continuous flow of substantial financial resources to Amazon and providers developing exclusively on its standards, making investments in European cloud offerings unattractive and permanently entrenching the monopoly positions.
As the code isn’t available for public review, there is no guarantee against back doors present in the code or introduced anew via software updates and fixes.
The withholding of security patches, late application of security improvements for known issues (or absence of such) or sharing information about known, unfixed problems with a third party could compromise the security of the platform. Recent incidents around the Pegasus spyware have shown the risks of unknown and know open security issues and how these can be and are abused at industrial scale by state and non-state actors.
With Amazon being the single provider behind the ecosystem, the unilateral termination of the contractual relationships could jeopardize the provision of public services.
As a final result, the state actors critically dependent on Amazon products would be forced to:
Pay almost any price called for.
In the future, forego concessions originally made with regard to data security and independence from U.S. authorities.
To accept non-open, proprietary standards set by Amazon, to which other (EU) states and large parts of the economy might have to realign themselves.
Strategic use of open source software as an alternative
The key alternative to the use of Amazon-controlled cloud infrastructure in public administration is the strategic use of open source software. This includes the adoption and further development of open source solutions that already exist and have been tried and tested by millions of users across all sectors of economy and government.
Open source technologies have become so successful because they were able to adapt very quickly to new requirements by a huge developer community. Only in this way could the high pace of innovation of digitization be realized at all. In fact, the large, market-dominating cloud providers such as Google, Facebook and Amazon, have relied almost exclusively on open source software, adapting them to their needs and building their own proprietary offerings on it.
Benefits open source brings, like the excellent usability and functionality, ability to control data access and security provisions, interoperability and complete customization freedom can thus meet the key needs that exist in administrations and industry worldwide.
Open source software is continuously developed by international communities. These usually consist of employees of companies and other organizations that use this software industrially. Conceptually, the state can build up sufficient competence in institutions such as the planned Center for Digital Sovereignty to participate in corresponding communities so that it can competently manage corresponding service providers.
According to studies, investments in the development of OSS bring an impressive 4x return on investment for the European GDP. With targeted investments, a successful strategy to create an equal-opportunity supplier market for European IT and digital ecosystems and platforms is fully conceivable.
How to achieve the real digital sovereignty for the European public sector
As a part of a strategy against escalating dependence of public administration and the industry on the proprietary, foreign cloud technology, the government should implement the following:
Deploy only fully open source-based offerings for implementing and handling key tasks of a sovereign state and enforce the same for in the private sector for mission-critical industrial applications.
Invest in open source cloud application and infrastructure. These alternatives to the hyperscaler tech have a great potential to leapfrog even the hyperscalers in innovation. They should become the basis of a sustainable European digital economy.
The open source ecosystem must be initially strengthened with targeted government mandates in order to activate private-sector investments and the involvement of the local providers. Every investment in open source is immediately available to the general public and thus also directly benefits the economy and civil society.
Cooperation with Amazon (or any proprietary offering) to build a “sovereign” cloud runs counter to these goals. Unilateral dependency threatens to make the state and society highly susceptible to malicious foreign actors, and limit strategic autonomy.
Do not wait. Digital dependency already starts with the IT infrastructure. A later change of the cloud platform entails high costs and efforts that are insurmountable for many organizations. The state must set the course for a sovereign and open cloud today.
Summary
It is positive to see the American Big Tech firms realizing they have to take the Digital Sovereignty of Europe more serious, and to see them look for ways around the US CLOUD ACT. However, It is clear that a EU data center does not block foreign entities from accessing EU citizen data, and neither do company policies.
The effectiveness of Amazon’s approach, which to us just seems a slight variation on earlier, unsuccessful attempts, will end up having to be tested in US courts — likely in secrecy under a gag order, so we won’t even know if it made a difference. Even if it does work, it does little to resolve the dependency problem which is at the core of the Digital Sovereignty challenge.
As we now see with various sanctions, foreign companies can be forced to stop services or sales to Europe, limiting the EU’s ability to make its own, sovereign decisions. A real Digitally Sovereign solution would need a fully open source based platform which is fundamentally not under control of a foreign state. Without the ability for European countries to run, maintain and improve a platform, independence just can’t be guaranteed.
We outlined the direction governments should take, and look forward to constructive input and a chance to contribute to the implementation of a strong, European Digital Economy.
Nextcloud for government
Regain control over your data with a sovereign open source collaborative cloud
Organisations, small and large, need a way to ensure the resiliency and digital sovereignty of their operations – an open-source, privacy-respecting alternative to Teams. And today, we present that solution - Nextcloud Talk.
Nextcloud has been recognized with the World Summit Award Germany that selects and promotes local digital innovation improving society, aiming to contribute to the United Nations' agenda of sustainable development goals.
Nextcloud Hub 9 lets you stay connected. Discover new federation features, workflow automation, big design overhaul and much much more in your favourite open-source collaboration platform!
DIE ZEIT, a prominent German outlet, interviewed Nextcloud’s founder Frank Karlitschek for an article on Microsoft’s anti-competitive behaviour on the European office software market. Read for a recap of the article and the key takeaways.
MagentaCLOUD’s migration to Nextcloud in 2021 resulted in a fully equipped Online Storage with an integrated online office suite that further improves the user experience, flexibility and security for customers.
We bring you a major update to the Nextcloud AI Assistant, plus the news we work with several big hosting providers like IONOS and OVHcloud to bring AI-as-a-Service options to you!
Bechtle and Nextcloud announce today a complete managed collaboration platform for the public sector that requires no tender and can be deployed immediately.
Discover how to make the switch from ownCloud to Nextcloud. Our quick guide provides insights into the migration process, helping you make the transition smoothly.
Today, US-based file sync & share vendor Kiteworks announced their acquisition of ownCloud and Dracoon. Kiteworks points out that their customers now have access to their file-sharing application. It is to be expected they will not maintain 3 similar products, but customers will have to migrate to the US firms’ platform or look for another […]
As part of Schleswig-Holstein's state digitization strategy, the state chancellery has announced they will work with Nextcloud to develop AI for working with government documents. This comes just after we announced the first private AI assistant last weekend with Hub 6. The German state already uses Nextcloud and their AI strategy aligns with our work on ethical, local AI technologies.
Over the last year, AI has become a popular topic. Some is hype, some is substance. Some is good, some is bad. We want to give you the good, not the bad, and ignore the hype! AI has a ton of opportunity – but also risk. So we put you in control – off by […]
In this article, we find out how open-source AI gets you your privacy back and explore examples of reliable AI models that you can use in your ecosystem.
On December 3rd, we invite you to the Nextcloud Enterprise Day Paris, Nextcloud's flagship event for professionals. The day will kick off with a keynote by our CEO and founder, Frank Karlitschek—a highlight where he will share our vision for the future of online collaboration, followed by a major announcement about Nextcloud Talk!
We save some cookies to count visitors and make the site easier to use. This doesn't leave our server and isn't to track you personally!
See our Privacy Policy for more information. Customize
Statistics cookies collect information anonymously and help us understand how our visitors use our website. We use cloud-hosted Matomo
Matomo
_pk_ses*: Counts the first visit of the user
_pk_id*: Helps not to double count the visits.
mtm_cookie_consent: Remembers that consent for storing and using cookies was given by the user.
_pk_ses*: 30 minutes
_pk_id*: 28 days
mtm_cookie_consent: 30 days