Last week, Europe's flagship aerospace company did something the digital sovereignty debate has been waiting years for. It moved from US to EU native servers.
Airbus is migrating its most critical applications off Amazon Web Services and onto Scaleway, a French cloud provider, following a tender it launched at the start of 2026 after The Register first revealed its intentions in December. The scope is what Airbus calls its minimum viable company: the roughly 900 applications it needs to keep functioning, beginning with 70 currently hosted on AWS, including its ERP, manufacturing execution systems, CRM and product lifecycle management. The systems that design, build and sell aircraft. Catherine Jestin, Airbus's Executive Vice President for Digital, put the reasoning plainly: the arrangement keeps the company's critical data assets shielded from foreign extraterritorial laws.
The Ancestry of That Sentence
If you have followed this series, you will recognise where that reasoning comes from. The US CLOUD Act of 2018 allows American authorities to compel US-headquartered companies to produce data they hold, wherever in the world it physically sits. In June 2025 a Microsoft executive, asked under oath in the French Senate whether the company could guarantee that French data would never be handed to US authorities without French consent, said it could not. In June this year Brussels answered with its Technological Sovereignty Package, whose centrepiece, the proposed Cloud and AI Development Act, would grade cloud services sold to the public sector across four sovereignty levels, with the most sensitive tier demanding full EU ownership and control.
The symbols followed within days. The European Parliament switched its default search engine to the French provider Qwant, and the Netherlands had already blocked an American acquisition of Solvinity, operator of the Dutch digital identity system. In April, the European Commission ran the first procurement in its history to apply explicit sovereignty criteria, awarding a €180 million sovereign cloud framework to European provider groups.
The direction of dependence explains the urgency. US providers hold roughly 70 percent or more of the European cloud market, and the European providers' share has been falling for years, from around 29 percent in 2017 to some 15 percent by 2022 on the European Commission's own figures.
And now the continent's largest industrial company has answered with a procurement decision, which in the end is the only language the market hears.
Read the Detail
The headlines say Airbus is leaving the American cloud. Read the detail and something more interesting appears: it is not.
Airbus is keeping AWS for Skywise, its aviation-data platform, and for its Case Management Assistant customer-support tool. It will carry on using Salesforce, Coupa and Workday. Its people will keep working in Microsoft and Google productivity suites.
The company does not intend to move away from all non-European solutions. It balances its choices on the criticality of the data.
That sentence is the whole playbook, and it is worth spelling out, because it is exactly what any organisation with data worth worrying about can copy.
The Four Moves
First, Airbus classified its estate by consequence rather than treating sovereignty as an ideology. Nine hundred applications constitute the minimum viable company; the rest is convenience, and convenience can live wherever convenience is cheapest. Most sovereignty programmes fail at precisely this step, by trying to repatriate everything and achieving nothing.
Second, it judged suppliers on jurisdiction as a first-class criterion. Airbus assessed bidders on three fronts: technical strength, operational resilience, and legal safeguards against non-European laws. Not the location of the data centre, but the legal exposure of the operator. Residency is geography; sovereignty is jurisdiction, and Airbus procured accordingly.
Third, it discovered the market has caught up. Jestin says Scaleway won on a very strong technical answer combined with a very strong commercial offer, competitive with the hyperscalers' public cloud pricing, with a commitment to involve Airbus in the provider's future roadmap. The lazy assumption, that European alternatives mean paying more for less, met an actual competitive tender and lost.
And fourth, it kept its options open everywhere else. This is sovereignty as strategic choice, not autarky: the critical tier under European law, the commodity tiers wherever the deal is best, and the ability to tell the difference written into procurement.
Two Hard Truths
Two hard truths belong in the picture, because the playbook is not a fairy tale.
Migrating seventy production systems including an ERP is a programme that slips at every large manufacturer that attempts it, and Airbus has attached its credibility to pulling it off. The sovereignty conversation will be watching the execution, not the announcement. If it works, every European board asks its CIO the obvious question at the next away day. If it stalls, the hyperscalers dine on the story for a decade.
And sovereignty stops at your own walls. Airbus has around 18,000 suppliers, and as The Register's Rupert Goodwins observed, nearly all of them will be running on American software, so the company's supply chain data lives in other people's tenants whatever it does with its own stack. One firm moving its crown jewels changes its exposure. It does not change the ecosystem's.
The Answer That Expired
Still, the significance stands. For years the answer to the sovereignty argument was that no serious enterprise would actually move: too hard, too expensive, too risky. That answer expired last week. A company that builds aircraft, with all the engineering conservatism that implies, ran the numbers, ran the tender, and moved its most sensitive systems under European law at hyperscaler-competitive cost.
The question for every other organisation holding data that matters, in Britain as much as anywhere, is no longer whether the playbook exists. Airbus has published it by example: classify by consequence, procure on jurisdiction, keep your options, move the tier that matters. The question now is only who runs it next.
Has your organisation classified its estate by criticality, and would jurisdiction survive contact with your procurement scoring?
