Sovereign Infrastructure-as-a-Service (IaaS) Market

The sovereign infrastructure-as-a-service (IaaS) market reached an estimated USD 52,358 million in 2025 and is projected to climb to USD 275,943 million by 2032, expanding at a CAGR of 27% from 2026 to 2032. This growth is driven by a structural reclassification of cloud infrastructure from a procurement convenience to a national-security asset. Over 140 countries now have data sovereignty or data localization laws on the books. The EU's Cloud Sovereignty Framework has established three certification tiers (SEAL 1, 2, and 3), with SEAL-3 requiring that the entire stack—infrastructure, operations, personnel, and key management—be under EU jurisdiction and free from foreign government access orders. European sovereign cloud IaaS spending reached an estimated USD 6.9 billion in 2025 and is projected to grow 83% in 2026 to USD 12.6 billion, nearly doubling again to USD 23.1 billion in 2027. The European Commission's Cloud III framework awarded EUR 180 million over six years to four European-controlled providers in April 2026. Sovereign IaaS has crossed from policy ambition to commercial reality—government agencies, defense ministries, central banks, and regulated enterprises are signing contracts and migrating workloads, and the infrastructure market serving them is one of the fastest-growing segments of global cloud computing.

Top 10 Key Takeaways

• North America holds the largest base, driven by US federal GovCloud, defense Impact Level requirements, and enterprise data residency mandates.
• Asia Pacific is the fastest-growing region, propelled by data localization laws across India, Japan, Australia, China, and Southeast Asia.
• Data sovereignty (data residency and access control within national borders) is the dominant sovereignty tier; technical sovereignty (full-stack national control / SEAL-3 class) is the fastest-growing.
• Government and defense is the leading end user, accounting for roughly a third of sovereign IaaS demand; financial services is the fastest growing.
• Hyperscaler sovereign regions (Azure, Google, AWS, Oracle) lead by deployment volume through installed-base distribution and feature parity advantages.
• European-owned sovereign clouds (OVHcloud, T-Systems, IONOS, Scaleway) are the fastest-growing delivery model as EU SEAL-3 certification excludes US hyperscaler-controlled infrastructure.
• The EU EUCS three-tier certification (SEAL 1/2/3) is the regulatory framework reshaping European sovereign cloud procurement—SEAL-3 requires EU-controlled operations, personnel, and key management.
• Sovereign AI is the category's most powerful accelerant: running AI models on jurisdiction-controlled compute is a requirement that did not exist three years ago and now drives billions in infrastructure demand.
• The near-term opportunity lies in European sovereign IaaS spending (83% YoY growth to USD 12.6B in 2026), sovereign AI compute, and confidential computing as the technical sovereignty bridge.
• The near-term risk is the sovereignty premium (15–40% over standard public cloud), hyperscaler feature parity gaps in sovereign regions, and the complexity of defining what "sovereign" actually means across data, operational, technical, and legal dimensions.

Why the Sovereign IaaS Market Matters Now

When a government agency stores citizen data on a foreign-controlled cloud, it faces a risk that no amount of encryption eliminates: the legal jurisdiction under which the cloud operator incorporates may compel disclosure of that data without the host nation's consent. The US CLOUD Act gives American authorities the power to demand data held by US companies regardless of where the data is physically stored. This extraterritorial reach—combined with the Schrems II ruling that invalidated the EU–US Privacy Shield—has turned data residency from a compliance detail into a sovereignty question debated at the highest levels of government.

Sovereign IaaS addresses this by providing compute, storage, and networking infrastructure that remains under the legal, operational, and technical control of a specific jurisdiction. The market covers the IaaS platforms, data center infrastructure, and managed services delivered under sovereign control—whether by hyperscaler sovereign regions (isolated partitions of AWS, Azure, Google Cloud, or Oracle Cloud that meet data residency and operational requirements), European-owned cloud providers (OVHcloud, T-Systems, IONOS, Scaleway), joint-venture sovereign clouds (Thales–Google S3NS in France, Capgemini–Orange–Microsoft Bleu in France, T-Systems–Google sovereign cloud in Germany), private sovereign IaaS (government-owned, defense-grade infrastructure), and sovereign edge deployments. Out of scope are sovereign PaaS and SaaS products without an IaaS component, traditional on-premises infrastructure without cloud delivery models, and general public cloud without sovereign controls.

Three dimensions define the market's sovereignty spectrum. Data sovereignty ensures data remains within national borders and is inaccessible to foreign authorities. Operational sovereignty ensures that the operations team, support staff, and key management personnel are nationals or EU residents operating under local law. Technical sovereignty ensures the entire technology stack—from silicon to software—is free from foreign backdoors, kill switches, or access orders. Most sovereign IaaS deployments satisfy the first dimension; fewer satisfy the second; and the SEAL-3 class that satisfies all three is the fastest-growing and most commercially demanding tier. The market connects to the [INTERNAL LINK: IaaS market], the [INTERNAL LINK: sovereign AI market], the [INTERNAL LINK: cloud security market], and the [INTERNAL LINK: government cloud market].

Market Trends Shaping Sovereign IaaS

The defining trend is sovereign cloud crossing from policy ambition to commercial reality in 2026. The European Commission's Cloud III framework—EUR 180 million over six years, awarded in April 2026 to four European-controlled providers—is the first large-scale EU joint procurement for sovereign cloud services. OVHcloud won positions in two of the most visible 2026 sovereign deals: Cloud III and the European Central Bank's digital euro project. European sovereign cloud IaaS spending is growing at 83% year-over-year. These are not pilot budgets or study grants—they are production contracts with multi-year commitments that signal the market has moved beyond advocacy into execution.

A second trend is the three-tier sovereignty spectrum crystallizing around the EU EUCS (European Union Cybersecurity Certification Scheme) and its SEAL levels. SEAL-1 satisfies basic security requirements. SEAL-2 adds operational controls and European data residency. SEAL-3 requires full-stack sovereignty: EU-controlled operations, EU-national personnel, EU-based key management, and protection from foreign government access orders—a standard that, by design, excludes infrastructure controlled by US hyperscalers, even when physically located in Europe. This three-tier framework is reshaping procurement: government agencies and defense organizations are specifying SEAL-3, regulated industries are moving to SEAL-2, and commercial enterprises are adopting SEAL-1 as a baseline.

A third trend is hyperscaler sovereign regions as the volume-leader delivery model. Microsoft Azure, Google Cloud, AWS, and Oracle have each launched sovereign region configurations that provide data residency, encryption-key sovereignty, and operational controls within specific countries. These sovereign regions inherit the hyperscaler's service breadth, developer tooling, and ecosystem compatibility—advantages that European-owned providers cannot yet match. The trade-off is that the underlying infrastructure and software stack remain under US corporate control, which means hyperscaler sovereign regions satisfy data sovereignty (SEAL-1/2) but not full technical sovereignty (SEAL-3).

A fourth trend is sovereign AI as the category's most powerful accelerant. Running AI models—training, fine-tuning, and inference—on jurisdiction-controlled compute is a requirement that governments and regulated enterprises are now specifying explicitly. Sovereign AI demands sovereign IaaS: the GPU clusters, storage systems, and networking that support model operations must reside within the jurisdiction, be operated by cleared personnel, and be free from foreign access orders. This requirement is pulling GPU-class compute into the sovereign IaaS market for the first time, significantly expanding the per-workload value.

A fifth trend is confidential computing as the technical bridge. AMD SEV-SNP and Intel TDX provide hardware-enforced isolation that encrypts data in memory during processing, allowing workloads to run on shared infrastructure while remaining cryptographically inaccessible to the cloud operator. Confidential computing does not replace operational or legal sovereignty—but it narrows the trust gap, enabling organizations to run sensitive workloads on hyperscaler sovereign regions with an additional layer of technical assurance that the operator cannot access the data even if compelled.

Market Drivers Accelerating Growth

The first driver is data localization laws proliferating globally. Over 140 countries now mandate some form of data residency, data localization, or cross-border data transfer restriction. Each law creates a compliance requirement that sovereign IaaS satisfies by design.

The second driver is the EU EUCS framework creating structured procurement demand. SEAL certification levels give buyers a standardized way to specify sovereignty requirements and give suppliers a certification to build toward. This standardization reduces procurement friction and accelerates contract execution.

The third driver is national security and defense agencies requiring jurisdiction-controlled infrastructure. Defense, intelligence, and critical-infrastructure agencies have sovereignty requirements that no public cloud—even with sovereign controls—can fully satisfy, driving demand for private sovereign IaaS and the highest-tier SEAL-3 offerings.

A fourth driver is European sovereign IaaS spending growing at 83% year-over-year. The jump from USD 6.9 billion in 2025 to a projected USD 12.6 billion in 2026 and USD 23.1 billion in 2027 represents the steepest growth curve in any cloud infrastructure sub-segment, creating a demand pool that is pulling investment from hyperscalers, European providers, and partnership ventures simultaneously.

Market Challenges and Restraints

The most significant restraint is the sovereignty premium. Sovereign IaaS costs 15–40% more than equivalent standard public cloud capacity, because the operational constraints (local personnel, dedicated hardware, compliance certification, restricted support channels) add cost that standard cloud regions do not bear. Buyers must justify this premium through compliance necessity, risk avoidance, or regulatory mandate—not raw cost efficiency.

A second restraint is hyperscaler feature parity. Sovereign regions often launch with a subset of the parent cloud's service catalog—missing specific compute instance types, managed services, or AI/ML tooling that are available in standard regions. This parity gap forces sovereign workloads to accept feature limitations or maintain hybrid architectures that split between sovereign and standard regions.

A third challenge is defining "sovereignty" itself. Data sovereignty, operational sovereignty, and technical sovereignty are distinct concepts that buyers conflate and vendors define selectively. A hyperscaler sovereign region may satisfy data residency while leaving the software stack under foreign corporate control. A European-owned provider may satisfy technical sovereignty while lacking the service breadth that enterprise workloads require. The market lacks a universally accepted sovereignty taxonomy outside the EU's SEAL framework, creating confusion in non-European procurement.

Segment Insights

By Sovereignty Tier

Data sovereignty (data residency and access control within national borders) is the dominant tier, because it is the minimum compliance requirement that the largest number of organizations must satisfy and the tier that hyperscaler sovereign regions address.

Technical sovereignty (full-stack national/EU control, SEAL-3 class) is the fastest-growing tier, driven by government, defense, and critical-infrastructure buyers that require protection from foreign government access orders—not just data residency.

By Delivery Model

Hyperscaler sovereign regions (Azure, Google, AWS, Oracle) lead by deployment volume, because their installed-base distribution and service breadth make them the lowest-friction path for organizations that need sovereignty without replatforming.

European-owned sovereign clouds (OVHcloud, T-Systems, IONOS, Scaleway) are the fastest-growing delivery model, as EU SEAL-3 certification requirements explicitly favor EU-controlled infrastructure and the Cloud III procurement demonstrates real contract volume.

By End User

Government and defense leads, representing roughly a third of sovereign IaaS spend, because national security agencies have the strictest sovereignty requirements.
Financial services is the fastest-growing end user, driven by DORA, national banking regulations, and central bank mandates that require jurisdiction-controlled infrastructure for systemically important financial data.

Key segmentation conclusions:

• Data sovereignty leads tiers; technical sovereignty (SEAL-3) grows fastest on government/defense demand.
• Hyperscaler sovereign regions lead by volume; European-owned providers grow fastest on SEAL-3 certification.
• Government/defense leads end users; financial services grows fastest on DORA and banking regulation.
• The sovereignty premium (15–40%) is the commercial trade-off; compliance necessity justifies it.
• Sovereign AI is the accelerant expanding per-workload value into GPU-class compute.

Regional Analysis: Sovereign IaaS Market by Region

North America

North America holds the largest base, valued at roughly USD 18,325 million in 2025 and projected to reach about USD 90,000 million by 2032, growing at a CAGR of 26.0%. The United States drives demand through federal sovereign cloud requirements—AWS GovCloud, Azure Government, Google Cloud for Government, and Oracle Government Cloud serve agencies that require FedRAMP High, DoD Impact Levels 4/5/6, and IC-classified workloads. The US market is distinctive because sovereignty is defined primarily by federal certification (FedRAMP, IL5/IL6) rather than nationality of the cloud operator, which means US hyperscalers serve the sovereign requirement directly. Canada contributes through Protected B cloud requirements and growing data residency mandates.

Europe

Europe grows strongly, valued at approximately USD 13,090 million in 2025 and forecast to reach around USD 73,000 million by 2032, expanding at a CAGR of 28.0%. Europe is the global regulatory epicenter for sovereign cloud. The EU EUCS SEAL framework, the Cloud III procurement (EUR 180 million), the ECB digital euro sovereign infrastructure, France's SecNumCloud certification, and Germany's BSI C5 attestation create the most structured sovereign IaaS procurement environment in the world. European sovereign IaaS spending grew 83% year-over-year to USD 12.6 billion in 2026 and is projected to nearly double again in 2027. Germany, France, the Netherlands, and the Nordics anchor demand, with the UK contributing through its distinct data protection regime.

Asia Pacific

Asia Pacific is the fastest-growing region, valued at roughly USD 15,707 million in 2025 and projected to reach about USD 90,943 million by 2032, growing at a CAGR of 29.0%. Data localization laws across India (DPDP Act, MeghRaj government cloud), Japan (ISMAP certification), Australia (Hosting Certification Framework), South Korea, and Singapore create a diverse landscape of national sovereignty requirements. China operates the world's largest domestic sovereign cloud through Alibaba Cloud, Tencent Cloud, and Huawei Cloud, under regulations that effectively exclude foreign providers from government and critical-infrastructure workloads. APAC's growth is propelled by sovereign AI demand: India's IndiaAI Mission, Japan's national compute programs, and Singapore's AI infrastructure all require jurisdiction-controlled IaaS.

Rest of World

The Rest of World market reached an estimated USD 5,236 million in 2025 and is projected to hit about USD 22,000 million by 2032, growing at a CAGR of 23.0%. The Middle East leads as the UAE and Saudi Arabia build sovereign AI and government cloud infrastructure under national control. Brazil contributes through its LGPD data protection law and growing government cloud mandates.

Regional outlook summary:

• North America holds the largest base on US federal sovereign cloud requirements (FedRAMP, IL5/IL6).
• Asia Pacific grows fastest on data localization proliferation and sovereign AI demand.
• Europe sets the regulatory standard through EUCS SEAL levels and drives the steepest IaaS spending growth (83% YoY).
• Rest of World grows through Gulf sovereign AI and Latin American data protection mandates.
• Data localization laws, certification frameworks, and sovereign AI compute are the universal variables.

Key Company Insights

The competitive landscape splits between hyperscaler sovereign offerings, European-owned sovereign providers, joint-venture sovereign clouds, and private/defense-grade operators. The leading players include Microsoft Azure, Google Cloud, AWS, Oracle, OVHcloud, T-Systems, SAP, Thales, IONOS, Scaleway, Atos/Eviden, Orange/Capgemini (Bleu), IBM Cloud, Alibaba Cloud, and Huawei Cloud.

• Microsoft Azure (Sovereign Regions / Azure Confidential)
• Google Cloud (Sovereign Controls / S3NS / T-Systems)
• Amazon Web Services (Dedicated Regions / GovCloud)
• Oracle (Sovereign Cloud / EU Sovereign Cloud)
• OVHcloud (European Sovereignty Leader)
• T-Systems / Deutsche Telekom
• SAP (Sovereign Cloud Offerings)
• Thales (S3NS JV with Google / CipherTrust)
• IONOS (1&1 / United Internet)
• Scaleway (Iliad Group)
• Atos / Eviden
• Orange Business / Capgemini (Bleu JV with Microsoft)
• IBM Cloud
• Alibaba Cloud (China Sovereign)
• Huawei Cloud (International Sovereign)

Among hyperscalers, Microsoft Azure leads sovereign region deployment breadth with Azure Government (US), Azure Sovereign (EU), and confidential computing through AMD SEV-SNP and Intel TDX. Google Cloud partners with Thales (S3NS in France) and T-Systems (Germany) to deliver sovereign cloud under European operational control while maintaining Google's service catalog. AWS operates GovCloud regions for US federal workloads and dedicated regions for international sovereignty. Oracle has positioned EU Sovereign Cloud as a differentiated offering with full operational isolation within the EU.

Among European-owned providers, OVHcloud is the most visible sovereignty champion, having won positions in the Cloud III framework and the ECB digital euro project. OVHcloud reached SEAL-3 status (the highest sovereignty level) through the Post Telecom and CleverCloud consortium. T-Systems (Deutsche Telekom) serves German government and enterprise sovereignty requirements. IONOS and Scaleway serve the mid-market European sovereignty demand. SAP launched sovereign cloud capability in Canada in March 2025 and continues expanding globally.

Joint-venture models represent a distinctive competitive tier. S3NS (Thales–Google) delivers Google Cloud services under French operational sovereignty. Bleu (Capgemini–Orange–Microsoft) delivers Azure services under French sovereignty. These JVs attempt to combine hyperscaler service breadth with European operational control—a commercially attractive but organizationally complex model.

Key company strategy conclusions:

• Hyperscaler sovereign regions lead by volume through installed-base distribution and service breadth.
• OVHcloud leads European-owned sovereignty on SEAL-3 certification and EU procurement wins.
• JV models (S3NS, Bleu) attempt to bridge hyperscaler capability with European operational control.
• Oracle has positioned EU Sovereign Cloud as a core product differentiation, not an afterthought.
• The competitive split is between hyperscaler data sovereignty (SEAL-1/2) and European-owned technical sovereignty (SEAL-3).

Recent Developments

• In April 2026, the European Commission awarded the Cloud III framework contract—EUR 180 million over six years—to four European-controlled provider consortia, the largest EU joint procurement for sovereign cloud services to date.¹
• In May 2025, Google Cloud announced enhancements to its sovereign cloud offerings in Europe, expanding data residency, key sovereignty, and operational controls across multiple EU member states.²
• In March 2025, SAP Canada launched sovereign cloud capability, extending its jurisdiction-controlled infrastructure to Canadian government and regulated enterprise customers.³
• In June 2025, NIST published guidance on sovereign cloud architectures, establishing federal recommendations for jurisdiction-controlled cloud infrastructure design and certification.5

Sources:

¹ Webhosting.today, "OVHcloud Bets on Europe's Sovereign Cloud," June 2026 — https://webhosting.today
² Straits Research, "Sovereign Cloud Market Size and Growth Chart," 2025–2033
³ Straits Research; Fortune Business Insights, "Sovereign Cloud Market," 2026
4 Industry forecast cited in Webhosting.today, June 2026 (European sovereign IaaS $6.9B→$12.6B→$23.1B)
5 Fortune Business Insights, "Sovereign Cloud Market," 2026; NIST sovereign cloud guidance, June 2025

Real-World Use Cases

OVHcloud's selection for both the European Commission Cloud III framework and the European Central Bank's digital euro infrastructure project demonstrated that European-owned sovereign providers can win at the highest tier of institutional procurement. The Cloud III framework specifies SEAL-3 sovereignty—requiring EU-controlled operations, personnel, and key management—which, by design, excludes infrastructure under US hyperscaler corporate control. OVHcloud reached SEAL-3 through a consortium with Post Telecom and CleverCloud, providing the European Commission and ECB with infrastructure that satisfies the strictest sovereignty interpretation in EU policy. The wins confirmed that SEAL-3 is not merely a theoretical certification tier—it is a production procurement requirement that is directing real contract volume to EU-controlled providers.6

Google Cloud's partnership with Thales to create S3NS (Sovereign and Secure Cloud by Numspot and SopraSteria) in France represents the joint-venture model for sovereign IaaS—combining hyperscaler service breadth with French operational sovereignty. S3NS delivers Google Cloud services from French data centers, operated by French-national personnel, with encryption keys managed by Thales under French jurisdiction. The model allows French government agencies and regulated enterprises to access Google's full IaaS and AI service catalog while satisfying SecNumCloud certification requirements. The deployment demonstrated the commercial viability of the JV approach, though it also highlighted the organizational complexity: maintaining service parity with standard Google regions while operating under a separate French legal entity requires continuous coordination between Google and Thales engineering and operations teams.7

Sources:
6 Webhosting.today, "OVHcloud Restructures Sales for Sovereign Cloud," June 2026; EU Cloud III framework documentation
7 Straits Research, "Sovereign Cloud Market," 2025; Fortune Business Insights, 2026; Google Cloud sovereign documentation

Market Segmentation

The sovereign IaaS market segments across four interlocking axes. By sovereignty tier, it spans data sovereignty, operational sovereignty, technical sovereignty (SEAL-3), and hybrid sovereignty—each representing a different depth of jurisdiction control and a different cost profile. By delivery model, it covers hyperscaler sovereign regions, European-owned clouds, JV sovereign clouds, private/defense-grade IaaS, and sovereign edge—each serving a distinct buyer profile. By end user, it serves government/defense, financial services, healthcare, critical infrastructure, and regulated enterprises. By region, adoption follows where data localization laws, certification frameworks, and sovereign AI demand intersect.

These axes interlock: a European defense ministry procuring SEAL-3 sovereign IaaS for AI model training is likely to choose an OVHcloud or T-Systems private sovereign cloud, operated by EU-national personnel with encryption keys under national control—a configuration that sits at the intersection of technical sovereignty, private delivery model, and government/defense end user.

Segmentation summary:

1. Data sovereignty leads tiers by volume; technical sovereignty (SEAL-3) grows fastest.
2. Hyperscaler sovereign regions lead delivery; European-owned clouds grow fastest on SEAL-3.
3. Government/defense leads end users; financial services grows fastest on DORA and banking mandates.
4. The sovereignty premium (15–40%) defines the cost structure; compliance necessity justifies it.
5. Sovereign AI is the accelerant that expands per-workload value into GPU-class infrastructure.

Conclusion and Future Outlook

Through 2032, sovereign IaaS will grow from a compliance-driven niche to a structural segment of the global cloud market—as standard a procurement category as standard public cloud is today for organizations operating under sovereignty mandates. The forces driving the market—data localization proliferating across 140+ countries, the EU EUCS framework creating structured procurement, sovereign AI requiring jurisdiction-controlled GPU compute, and the 83% year-over-year growth in European sovereign IaaS spending—are structural and self-reinforcing. The sovereignty question will not go away; if anything, geopolitical tensions, AI governance mandates, and the extraterritorial reach of US law will deepen the demand for jurisdiction-controlled infrastructure.

The competitive landscape will be defined by the tension between hyperscaler sovereign regions (which offer service breadth but not SEAL-3 technical sovereignty) and European-owned providers (which offer SEAL-3 but lack hyperscaler feature parity). Joint-venture models will attempt to bridge the gap, but their organizational complexity limits how fast they can scale. For cloud providers, government buyers, regulated enterprises, and investors, sovereign IaaS is no longer a policy experiment—it is a commercial market with multi-billion-dollar contracts, production workloads, and a growth trajectory that is reshaping how cloud infrastructure is designed, delivered, and governed worldwide.

Frequently Asked Questions (FAQ)

1. How big is the sovereign IaaS market?
The sovereign IaaS market was estimated at roughly USD 52,358 million in 2025 and is projected to reach about USD 275,943 million by 2032. North America accounts for the largest share, driven by US federal sovereign cloud requirements.
2. What is the sovereign IaaS market growth rate?
The market is forecast to grow at a CAGR of approximately 27% from 2026 to 2032. Asia Pacific is the fastest-growing region at around 29%, driven by data localization laws and sovereign AI demand. European sovereign IaaS spending is growing at 83% year-over-year.
3. Which segment leads the sovereign IaaS market?
By sovereignty tier, data sovereignty leads by volume. Technical sovereignty (SEAL-3) is the fastest-growing. By delivery model, hyperscaler sovereign regions lead; European-owned providers grow fastest on SEAL-3 certification demand.
4. Who are the key players in the sovereign IaaS market?
Leading companies include Microsoft Azure, Google Cloud, AWS, Oracle, OVHcloud, T-Systems, SAP, Thales, IONOS, Scaleway, Atos/Eviden, Orange/Capgemini (Bleu), IBM Cloud, Alibaba Cloud, and Huawei Cloud.
5. What are the factors driving the sovereign IaaS market?
The primary drivers are 140+ countries with data sovereignty mandates, the EU EUCS three-tier SEAL certification framework, national security agencies requiring jurisdiction-controlled infrastructure, European sovereign IaaS spending growing 83% YoY, and sovereign AI requiring jurisdiction-controlled GPU compute.

Speak With Our Analyst

The sovereign IaaS market is redefining how cloud infrastructure is governed across borders, and the segment-level detail on sovereignty tiers, certification frameworks, delivery-model economics, and competitive positioning is where strategic decisions are won or lost. MarketsandMarkets can help you go deeper: request a sample of the full study, speak with our analyst about your specific questions, or customize the scope to your target geographies, sovereignty tiers, and end-user verticals. Reach out to explore how this intelligence can inform your sovereign cloud strategy, procurement, or investment decisions.