Germany's Sovereign Cloud in 2026: Gaia-X, IONOS, OVHcloud, and the Hyperscaler Compromise
Germany has been the EU's most-active sovereign-cloud market. Where Gaia-X actually sits in 2026, how IONOS and OVHcloud compete, and the hyperscaler-with-sovereign-controls pattern.
Germany has been the EU’s most-active sovereign-cloud market for a decade. The Gaia-X initiative, launched in 2019, was meant to be the European answer to US-hyperscaler dependency. The reality in 2026 is more complex: Gaia-X has produced useful federated-data-sharing patterns but has not displaced the hyperscalers. The actual sovereign-cloud market is split between European providers (IONOS, OVHcloud, Open Telekom Cloud), hyperscaler “sovereign” arrangements (Azure’s S3NS partnership, AWS’s European Sovereign Cloud, GCP’s various sovereign offerings), and the various government-specific sovereign deployments.
I want to walk through where the German sovereign-cloud market actually sits in 2026 and what enterprise buyers should think about.
Gaia-X — what it actually became#
Gaia-X was launched with two distinct ambitions. The first — to produce a federated European cloud capacity that could compete with hyperscalers on scale and economics — has not materialized. The second — to produce a federated data-sharing framework with strong sovereignty controls — has produced meaningful operational adoption in specific industries.
By 2026, Gaia-X exists primarily as:
- A federation specification for data sharing across providers with explicit sovereignty guarantees.
- A trust framework for data exchange between participants with verifiable claims about jurisdiction, security, and operational practices.
- A set of reference implementations that specific industries are building on (Catena-X in automotive, Manufacturing-X, Healthcare-X, Energy-X).
The Catena-X automotive data network is the most operationally significant — Mercedes-Benz, BMW, Volkswagen, BASF, Bosch, and dozens of others participate in cross-company data sharing for supply chain, sustainability, and circularity use cases. The architecture is genuinely federated, with no single hyperscaler hosting the common data plane.
Gaia-X did not become the European AWS, but it became something useful.
The European cloud providers#
IONOS Cloud (formerly 1&1 IONOS) is the largest German cloud provider with substantial enterprise adoption. The 2024-2025 expansion has added GPU capacity, managed Kubernetes, and broader platform services. IONOS has positioned itself explicitly as a sovereign alternative to hyperscalers for German and EU customers.
OVHcloud (French) is the broader European cloud champion with substantial German operations. The 2024 product expansion has added AI-specific compute and more comprehensive managed services. OVHcloud is the most credible European hyperscaler-equivalent.
Open Telekom Cloud (operated by Deutsche Telekom T-Systems) is a Huawei-tech-based offering with substantial Germany-resident infrastructure. Some Chinese-tech concerns have moderated demand in recent years; the trajectory has been measured.
STACKIT is the Schwarz Group’s (Lidl/Kaufland) cloud offering — initially built for the retailer’s internal use, now offered externally. Strong in retail and food sector.
Cleura (Swedish) — Nordic cloud with German presence.
plusserver and others — round out the German domestic cloud market.
The collective share of these providers is real but smaller than the hyperscalers — perhaps 15-20% of the German enterprise cloud market combined.
Hyperscaler sovereign offerings#
The hyperscalers have responded to European sovereign-cloud demand with specific offerings:
Microsoft’s Bleu and S3NS partnerships in France produce Azure capacity operated by French firms with sovereignty guarantees. Microsoft has been signaling similar partnership models elsewhere in Europe.
AWS European Sovereign Cloud — announced 2023, in operational stages 2025-2026, with the first region in Brandenburg. AWS Europe Sovereign Cloud (AWS ESC) is operated separately from the regular AWS European regions with EU citizens running operations and EU-based data residency guarantees.
Google Cloud’s sovereign offerings include partnerships with European providers (T-Systems in Germany, S3NS in France, Telefonica Tech in Spain) and the Google Sovereign Cloud architecture.
Oracle Cloud has substantial European sovereign positioning, particularly for BFSI workloads.
The hyperscaler-with-sovereign-controls pattern has been increasingly accepted by enterprise customers who would have preferred pure European alternatives but find the operational economics compelling. The trade-offs are real: sovereignty guarantees are contractual and operational, not architectural; the underlying infrastructure remains US-headquartered hyperscaler infrastructure.
What enterprise buyers should consider#
For a German enterprise doing cloud architecture in 2026:
-
Workload-specific sovereignty assessment. Most workloads do not need sovereign cloud; specific workloads (regulated, public-sector, particularly sensitive) do. Map each workload to its actual sovereignty requirements.
-
Hyperscaler sovereign carve-outs for the workloads that need them. AWS ESC, Bleu, S3NS, and Google’s sovereign arrangements provide hyperscaler scale with sovereignty controls. These are typically the operationally-best option for sovereignty-required workloads.
-
European providers for specific use cases. IONOS, OVHcloud, STACKIT, plus the various Gaia-X federated arrangements have specific strengths. The economics work for some workloads.
-
Gaia-X participation for data-sharing use cases. If your industry has a Gaia-X / X-network framework (Catena-X for automotive, Manufacturing-X, etc.), participation is increasingly expected.
-
Multi-cloud is harder than it looks. Real multi-cloud is operationally expensive. Pick a primary; have specific workloads on alternatives if justified.
-
Egress costs matter. Brazilian-to-US egress costs add up; the equivalent cross-cloud or cross-region patterns produce material bills.
The regulatory context#
Several regulatory frameworks shape German sovereign-cloud decisions:
- GDPR and the German DPA enforcement posture on US data transfers.
- NIS2 (Network and Information Security Directive 2) — operational from late 2024, with German implementation through KRITIS-Dachgesetz, which has substantial cloud-architecture implications for critical infrastructure operators.
- DORA (Digital Operational Resilience Act) for financial services — operational from 2025, with specific obligations on cloud architecture.
- The proposed EU Cloud Services Cybersecurity Certification Scheme (EUCS) — still in negotiation, with implications for cloud procurement.
The regulatory direction is more stringent expectations on cloud architecture, particularly for regulated sectors.
What’s coming in 2026 and 2027#
Three things to watch:
AWS ESC operational expansion — the Brandenburg launch is the first; additional capacity is expected.
EUCS finalization — the EU cybersecurity certification scheme for cloud, if finalized at the stricter end of the negotiating range, would substantially shape future procurement.
The Catena-X and adjacent X-networks scale-up — Gaia-X-aligned federated data networks reach broader industry deployment.
Where pdpspectra fits#
Our cloud architecture work spans Germany and the broader EU. We do hyperscaler architecture, sovereign-cloud carve-outs, and the broader cloud strategy work that the German market requires.
Related reading: the Brazil cloud adoption post, the India cloud adoption post, and the Japan cloud adoption post.
German sovereign cloud is real and contested. Talk to our team about your architecture.