Europe’s Central Banks Ditch U.S. Cloud Giants-Why Geopolitics Is Driving a Digital Sovereignty Shift

De Nederlandsche Bank is migrating its essential cloud services from U.S. Giants Google, Amazon and Microsoft to Schwartz Digits, a subsidiary of the Lidl group. This strategic pivot reflects a broader European drive toward “digital sovereignty” to mitigate jurisdictional risks posed by the 2018 U.S. Cloud Act.

Central banking is a game of risk aversion. When you are tasked with protecting a nation’s currency and maintaining financial stability, “disruption” is a dirty word. For decades, the industry standard was the suit-and-tie approach: cautious, predictable, and deeply conservative. But the digital infrastructure supporting these institutions has shifted. For years, the “tried and trusted” path meant outsourcing data to the American hyperscalers—the performance of Azure, AWS, and Google Cloud was simply unmatched.

That era of blind trust is ending. The Dutch central bank’s decision to move its core services to Schwartz Digits—an entity born from the retail logistics of a discount supermarket giant—is a jarring signal to the markets. It is not a indictment of American technical skill or scale; it is a calculation of geopolitical risk. The friction is no longer about who has the fastest server, but who holds the keys to the data when a foreign government comes knocking.

This transition creates a massive headache for any European enterprise operating under strict regulatory mandates. The problem is a fundamental clash of laws. On one side is the European desire for data residency and autonomy; on the other is the U.S. Cloud Act of 2018, which allows U.S. Authorities to compel technology operators to hand over data, regardless of where that data is physically stored. For a central bank or a healthcare provider, the prospect of a foreign power demanding access to sensitive national data is an unacceptable vulnerability.

Enter the “Sovereign Cloud” movement. As firms realize that technical performance cannot override jurisdictional risk, they are increasingly seeking data sovereignty consultants to architect environments that are legally insulated from extraterritorial reach.

The Macro Shift: Why Europe is Hedging Against the U.S.

The movement away from U.S. Software is not an isolated event but a systemic trend. We are seeing a coordinated effort to build a European digital fortress. This shift is driven by three primary catalysts:

• Jurisdictional Friction: The U.S. Cloud Act created a legal backdoor that European regulators find intolerable. When the International Criminal Court (ICC) moved its data operations to openDesk—backed by the German federal government—it wasn’t a technical upgrade; it was a legal escape. The ICC’s move followed reports that the email account of chief prosecutor Karim Khan had been suspended, highlighting the “chilling effect” that U.S. Sanctions and executive orders can have on international institutions.
• The Rise of Non-Traditional Providers: Schwartz Digits and its subsidiary, StackIT, prove that industrial-grade cloud services can emerge from unexpected places. Originally built to manage the supply chain of butter and eggs for Lidl, these entities now serve as secure data hubs for high-stakes clients like Commerzbank and the Hamburg Port Authority.
• Strategic De-risking: The Dutch government’s recent deals with StackIT are a deliberate attempt to reduce dependence on parties outside Europe. Justice and Security Minister David van Weel explicitly framed this as an “important step in reducing our dependence on parties outside Europe and strengthening our digital resilience.”

The financial implications for the U.S. Hyperscalers are subtle but persistent. While a single central bank won’t crater the quarterly earnings of a trillion-dollar company, the loss of “anchor tenants” in the public sector creates a vacuum. When government agencies leave, the private sector often follows to maintain regulatory alignment.

Companies like SAP are already reacting, announcing moves to strengthen their European-based digital infrastructure. This is a classic case of regulatory arbitrage—firms are pivoting their infrastructure to match the legal preferences of their most powerful customers.

“The risk of a European country’s data being demanded by a foreign nation… Is one too high to contemplate across a myriad of disciplines, including healthcare, government services and banking.”

For C-suite executives, this means the “default” choice of a U.S. Cloud provider is now a board-level risk discussion. The focus has shifted from uptime and latency to legal provenance. This has triggered a surge in demand for regulatory compliance lawyers who can navigate the overlap between the GDPR and the U.S. Cloud Act.

The “America Second” Doctrine in Digital Infrastructure

The geopolitical irony is palpable. While the U.S. Administration frequently champions “America First,” Europe is quietly implementing a policy of “America Second”—or in some cases, “America Not All.” This is not a trade war fought with tariffs on steel, but a quiet war fought with data centers and API keys.

The risk is no longer theoretical. The controversy surrounding Palantir’s deal with the U.K.’s National Health Service (NHS) served as a cautionary tale for the rest of the continent. The fear is that once the data is in a U.S.-controlled ecosystem, the owner of that data is no longer the client, but the provider—and by extension, the provider’s government.

This environment is forcing a massive wave of cloud repatriation and diversification. Enterprise leaders are no longer looking for a single “all-in” partner. Instead, they are deploying multi-cloud strategies that blend the raw power of Microsoft Azure or AWS with the jurisdictional safety of European providers. This complexity requires a new breed of enterprise cloud migration specialists who can manage hybrid environments without sacrificing performance.

The bottom line is that digital resilience is now synonymous with digital independence. The Dutch central bank isn’t just buying cloud space; it is buying an insurance policy against geopolitical volatility.

As the divide between American and European approaches to data security widens, the winners will be the firms that can bridge the gap between high-performance computing and absolute jurisdictional certainty. The shift toward sovereign tech is an evergreen trend that will define the next decade of B2B infrastructure. For firms looking to navigate this transition without compromising their operational efficiency, finding vetted, compliant partners is no longer optional—it is a survival requirement. Explore the World Today News Directory to connect with the legal and technical architects leading the charge in digital sovereignty.