From 9bfa3a8e604f83442bcbd35fd1f4851762e2e480 Mon Sep 17 00:00:00 2001 From: Edgar Vonk Date: Wed, 19 Aug 2026 16:10:38 +0200 Subject: [PATCH 1/5] feat: move EU cloud to adopt and generally prefer over AWS and Azure --- radar/2026-08-19/aws.md | 10 +++ radar/2026-08-19/azure.md | 10 +++ radar/2026-08-19/european-sovereign-cloud.md | 81 ++++++++++++++++++++ 3 files changed, 101 insertions(+) create mode 100644 radar/2026-08-19/aws.md create mode 100644 radar/2026-08-19/azure.md create mode 100644 radar/2026-08-19/european-sovereign-cloud.md diff --git a/radar/2026-08-19/aws.md b/radar/2026-08-19/aws.md new file mode 100644 index 0000000..5151f36 --- /dev/null +++ b/radar/2026-08-19/aws.md @@ -0,0 +1,10 @@ +--- +title: "AWS" +ring: adopt +quadrant: platforms-and-operations +featured: true +--- + +In general, and especially for our Open Source Common Ground projects, we prefer a [European sovereign cloud provider](/platforms-and-operations/european-sovereign-cloud) over the US hyperscalers, to keep data and operations within EU jurisdiction. + +Depending on the context and specific project requirements, we can still opt for a US hyperscaler. When we do, [AWS](https://aws.amazon.com) is our preferred choice: it is the (local as well as global) market leader in cloud-native computing and offers the best set of services for our needs when compared to [Azure](/platforms-and-operations/azure). diff --git a/radar/2026-08-19/azure.md b/radar/2026-08-19/azure.md new file mode 100644 index 0000000..37a6caa --- /dev/null +++ b/radar/2026-08-19/azure.md @@ -0,0 +1,10 @@ +--- +title: "Azure" +ring: adopt +quadrant: platforms-and-operations +featured: true +--- + +In general, and especially for our Open Source Common Ground projects, we prefer a [European sovereign cloud provider](/platforms-and-operations/european-sovereign-cloud) over the US hyperscalers. + +Depending on the context and specific project requirements, we can still opt for a US hyperscaler, with [AWS](/platforms-and-operations/aws) our preferred choice there. Azure remains adopt too: we see continued traction in our market and get requests from clients to keep actively supporting it, but our preference for Azure is lower than for AWS. diff --git a/radar/2026-08-19/european-sovereign-cloud.md b/radar/2026-08-19/european-sovereign-cloud.md new file mode 100644 index 0000000..e2f5f32 --- /dev/null +++ b/radar/2026-08-19/european-sovereign-cloud.md @@ -0,0 +1,81 @@ +--- +title: "European Sovereign Cloud" +ring: adopt +quadrant: platforms-and-operations +featured: true +--- + +European Sovereign Cloud refers to cloud infrastructure operated by European providers, subject exclusively to EU jurisdiction, and designed to guarantee full digital sovereignty. As geopolitical tensions and extraterritorial legislation (such as the US CLOUD Act and FISA Section 702) create uncertainty around data processed by non-EU cloud providers, the need for genuinely sovereign alternatives has become a strategic priority, particularly for organisations handling sensitive data or operating in regulated sectors. + +In general, and especially for our Open Source Common Ground projects, we prefer a European sovereign cloud provider over the US hyperscalers. Depending on the context and specific project requirements, we can still opt for [AWS](/platforms-and-operations/aws), and with less preference, for [Azure](/platforms-and-operations/azure). + +### Why European Sovereign Cloud? + +- **Digital Sovereignty:** Ensures that data, infrastructure, and operations remain entirely within EU legal jurisdiction, eliminating exposure to non-EU government access requests or restrictions. + +- **GDPR & Schrems II Compliance:** Following the Schrems II ruling, transferring personal data to US-based providers carries inherent legal risk. European sovereign cloud providers eliminate this concern by design. + +- **Regulatory Alignment:** Sectors such as government ([BIO](https://www.digitaleoverheid.nl/overzicht-van-alle-onderwerpen/cybersecurity/kaders-voor-cybersecurity/baseline-informatiebeveiliging-overheid/)), healthcare ([NEN 7510](https://www.nen.nl/nen-7510-1-2017-nl-238898)), and finance increasingly require or strongly prefer data processing within EU borders by EU-controlled entities. + +- **Reducing Strategic Dependency:** Reliance on a small number of US hyperscalers ([AWS](/platforms-and-operations/aws), [Azure](/platforms-and-operations/azure), GCP) creates concentration risk. Diversifying towards European providers strengthens organisational resilience. + +- **GAIA-X & European Cloud Initiatives:** The [GAIA-X](https://gaia-x.eu/) initiative promotes interoperable, transparent, and sovereign data infrastructure across Europe. Selecting providers aligned with these principles future-proofs the investment. + +### Key Selection Criteria + +When evaluating a European sovereign cloud provider, the following criteria are essential: + +- **EU Ownership & Jurisdiction:** The provider must be an EU-registered entity with no controlling interest by non-EU parties. + +- **OpenStack or Open API:** An open, standardised API, preferably [OpenStack](https://www.openstack.org/), significantly reduces vendor lock-in. OpenStack is the de facto open standard for cloud infrastructure and enables portability across providers. + +- **Managed Kubernetes:** A mature, managed Kubernetes offering is critical for modern application deployment and operations. + +- **Comprehensive Service Catalogue:** Beyond compute and storage, look for managed databases, object storage, load balancers, DNS, backup services, VPN/networking, and monitoring. + +- **Infrastructure as Code Compatibility:** First-class support for Terraform / [OpenTofu](https://opentofu.org/) providers is essential for automation and reproducibility. + +- **Cost Transparency & Competitiveness:** Transparent, predictable pricing without hidden fees. Evaluate compute, storage, egress, and managed services costs against each other and hyperscaler equivalents. Pricing models vary significantly between providers and should be compared per use case. + +- **Certifications:** ISO 27001, SOC 2, and, depending on context, NEN 7510 (healthcare) or BIO (Dutch government) compliance. + +- **Data Centre Location:** Preference for Dutch or at minimum EU-based data centres with transparent information about physical locations. + +### Provider Assessment + +#### Cyso (Netherlands), Shortlisted + +[Cyso](https://cyso.com/) is a Dutch cloud provider offering OpenStack-based infrastructure with data centres in the Netherlands. + +- **Strengths:** Dutch entity, OpenStack API (maximises portability), Kubernetes support, strong focus on managed hosting and compliance, ISO 27001 and NEN 7510 certified. Through the acquisition of [Fuga Cloud](https://www.fuga.cloud/), Cyso now operates a mature OpenStack-based public cloud platform with multiple EU regions (Amsterdam, Frankfurt, and more planned), NVMe storage, and a "4 opens" philosophy (open development, open standards, open source, open collaboration). +- **Considerations:** Smaller scale compared to hyperscalers; evaluate depth of managed services catalogue (databases, backups, monitoring) and support SLA. +- **Verdict:** Strong fit for sovereignty requirements. The OpenStack API is a significant advantage for avoiding lock-in. Recommended for further evaluation. + +#### Scaleway (France), Shortlisted + +[Scaleway](https://www.scaleway.com/) is a French cloud provider (part of the Iliad Group) offering a broad and modern cloud platform. + +- **Strengths:** Comprehensive service catalogue (managed Kubernetes / Kapsule, managed databases, object storage, serverless, container registry), competitive pricing, strong developer experience, modern API and CLI tooling, out-of-the-box ovservability, French/EU data centres. +- **Considerations:** Does not use OpenStack, instead using a proprietary (but well-documented) API, which increases provider-specific coupling. However, a Terraform provider is available, mitigating some lock-in risk. French entity, so not Dutch, but firmly within EU jurisdiction. +- **Verdict:** Excellent technical offering with a broad service catalogue. The lack of OpenStack is a trade-off against the richness of features. Good option if the team accepts a degree of API-level coupling. + +#### OVHcloud (France), Alternative + +[OVHcloud](https://www.ovhcloud.com/) is one of Europe's largest cloud providers and a founding member of GAIA-X. + +- **Strengths:** OpenStack-based public cloud, managed Kubernetes, extensive global data centre network (with multiple EU locations including the Netherlands), competitive pricing, ISO 27001 and HDS certified, GAIA-X member. Terraform provider available. +- **Considerations:** Mixed reputation for support quality. Some enterprise-grade managed services (e.g. advanced database options) lag behind hyperscalers. Recent data centre incidents (Strasbourg, 2021) raised questions about resilience practices, though OVHcloud has since invested heavily in improvements. +- **Verdict:** Solid choice for OpenStack-based sovereign cloud. The scale of OVHcloud and GAIA-X membership are meaningful advantages. + +#### STACKIT (Germany), Alternative + +[STACKIT](https://www.stackit.de/) is the cloud platform of the Schwarz Group (Lidl/Kaufmann), built on OpenStack. + +- **Strengths:** German entity backed by one of Europe's largest retail groups, OpenStack-based, managed Kubernetes (SKE), managed databases (PostgreSQL, MariaDB, Redis, RabbitMQ), object storage, strong compliance posture (ISO 27001, C5), GAIA-X aligned. Terraform provider available. Notably, STACKIT has been contracted by De Nederlandsche Bank (DNB), underscoring its credibility and suitability for highly regulated financial institutions within the EU. +- **Considerations:** Relatively newer entrant to the public cloud market. The service catalogue is growing but may not yet match the breadth of Scaleway or OVHcloud. Less mature community and ecosystem. +- **Verdict:** Strong and increasingly credible choice backed by significant investment and validated by adoption in the European financial sector. OpenStack base and German sovereignty credentials make it a serious contender. + +#### Other Notable Providers + +- **[Cleura](https://cleura.com/)** (Sweden): OpenStack-based, formerly City Network. Strong sovereignty focus, compliant cloud, EU data centres. +- **[Open Telekom Cloud](https://open-telekom-cloud.com/)** (Germany): OpenStack-based, operated by T-Systems (Deutsche Telekom). Enterprise-grade with broad service catalogue. From bd56b95d10c2c651505a816b0c7fbfc834e6b5fa Mon Sep 17 00:00:00 2001 From: Edgar Vonk Date: Wed, 19 Aug 2026 15:15:56 +0000 Subject: [PATCH 2/5] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- radar/2026-08-19/european-sovereign-cloud.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/radar/2026-08-19/european-sovereign-cloud.md b/radar/2026-08-19/european-sovereign-cloud.md index e2f5f32..eeb923b 100644 --- a/radar/2026-08-19/european-sovereign-cloud.md +++ b/radar/2026-08-19/european-sovereign-cloud.md @@ -55,7 +55,7 @@ When evaluating a European sovereign cloud provider, the following criteria are [Scaleway](https://www.scaleway.com/) is a French cloud provider (part of the Iliad Group) offering a broad and modern cloud platform. -- **Strengths:** Comprehensive service catalogue (managed Kubernetes / Kapsule, managed databases, object storage, serverless, container registry), competitive pricing, strong developer experience, modern API and CLI tooling, out-of-the-box ovservability, French/EU data centres. +- **Strengths:** Comprehensive service catalogue (managed Kubernetes / Kapsule, managed databases, object storage, serverless, container registry), competitive pricing, strong developer experience, modern API and CLI tooling, out-of-the-box observability, French/EU data centres. - **Considerations:** Does not use OpenStack, instead using a proprietary (but well-documented) API, which increases provider-specific coupling. However, a Terraform provider is available, mitigating some lock-in risk. French entity, so not Dutch, but firmly within EU jurisdiction. - **Verdict:** Excellent technical offering with a broad service catalogue. The lack of OpenStack is a trade-off against the richness of features. Good option if the team accepts a degree of API-level coupling. From 432fad2fcd0e160eed2ebcdf93761f12fc3a3253 Mon Sep 17 00:00:00 2001 From: Edgar Vonk Date: Wed, 19 Aug 2026 15:16:11 +0000 Subject: [PATCH 3/5] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- radar/2026-08-19/european-sovereign-cloud.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/radar/2026-08-19/european-sovereign-cloud.md b/radar/2026-08-19/european-sovereign-cloud.md index eeb923b..fc1f76a 100644 --- a/radar/2026-08-19/european-sovereign-cloud.md +++ b/radar/2026-08-19/european-sovereign-cloud.md @@ -69,7 +69,7 @@ When evaluating a European sovereign cloud provider, the following criteria are #### STACKIT (Germany), Alternative -[STACKIT](https://www.stackit.de/) is the cloud platform of the Schwarz Group (Lidl/Kaufmann), built on OpenStack. +[STACKIT](https://www.stackit.de/) is the cloud platform of the Schwarz Group (Lidl/Kaufland), built on OpenStack. - **Strengths:** German entity backed by one of Europe's largest retail groups, OpenStack-based, managed Kubernetes (SKE), managed databases (PostgreSQL, MariaDB, Redis, RabbitMQ), object storage, strong compliance posture (ISO 27001, C5), GAIA-X aligned. Terraform provider available. Notably, STACKIT has been contracted by De Nederlandsche Bank (DNB), underscoring its credibility and suitability for highly regulated financial institutions within the EU. - **Considerations:** Relatively newer entrant to the public cloud market. The service catalogue is growing but may not yet match the breadth of Scaleway or OVHcloud. Less mature community and ecosystem. From 403970645859dcf9be76e3792e331891f14e1b04 Mon Sep 17 00:00:00 2001 From: Edgar Vonk Date: Wed, 19 Aug 2026 15:16:34 +0000 Subject: [PATCH 4/5] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- radar/2026-08-19/azure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/radar/2026-08-19/azure.md b/radar/2026-08-19/azure.md index 37a6caa..4d9ebe6 100644 --- a/radar/2026-08-19/azure.md +++ b/radar/2026-08-19/azure.md @@ -7,4 +7,4 @@ featured: true In general, and especially for our Open Source Common Ground projects, we prefer a [European sovereign cloud provider](/platforms-and-operations/european-sovereign-cloud) over the US hyperscalers. -Depending on the context and specific project requirements, we can still opt for a US hyperscaler, with [AWS](/platforms-and-operations/aws) our preferred choice there. Azure remains adopt too: we see continued traction in our market and get requests from clients to keep actively supporting it, but our preference for Azure is lower than for AWS. +Depending on the context and specific project requirements, we can still opt for a US hyperscaler, with [AWS](/platforms-and-operations/aws) our preferred choice there. Azure remains in the adopt ring as well: we see continued traction in our market and get requests from clients to keep actively supporting it, but our preference for Azure is lower than for AWS. From e96640faa0e1834f20af1930034ec649d96c02c6 Mon Sep 17 00:00:00 2001 From: Edgar Vonk Date: Wed, 19 Aug 2026 15:17:00 +0000 Subject: [PATCH 5/5] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- radar/2026-08-19/european-sovereign-cloud.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/radar/2026-08-19/european-sovereign-cloud.md b/radar/2026-08-19/european-sovereign-cloud.md index fc1f76a..4535feb 100644 --- a/radar/2026-08-19/european-sovereign-cloud.md +++ b/radar/2026-08-19/european-sovereign-cloud.md @@ -17,7 +17,7 @@ In general, and especially for our Open Source Common Ground projects, we prefer - **Regulatory Alignment:** Sectors such as government ([BIO](https://www.digitaleoverheid.nl/overzicht-van-alle-onderwerpen/cybersecurity/kaders-voor-cybersecurity/baseline-informatiebeveiliging-overheid/)), healthcare ([NEN 7510](https://www.nen.nl/nen-7510-1-2017-nl-238898)), and finance increasingly require or strongly prefer data processing within EU borders by EU-controlled entities. -- **Reducing Strategic Dependency:** Reliance on a small number of US hyperscalers ([AWS](/platforms-and-operations/aws), [Azure](/platforms-and-operations/azure), GCP) creates concentration risk. Diversifying towards European providers strengthens organisational resilience. +- **Reducing Strategic Dependency:** Reliance on a small number of US hyperscalers ([AWS](/platforms-and-operations/aws), [Azure](/platforms-and-operations/azure), Google Cloud Platform (GCP)) creates concentration risk. Diversifying towards European providers strengthens organisational resilience. - **GAIA-X & European Cloud Initiatives:** The [GAIA-X](https://gaia-x.eu/) initiative promotes interoperable, transparent, and sovereign data infrastructure across Europe. Selecting providers aligned with these principles future-proofs the investment.