Loading story…
The European Commission told Amazon and Microsoft that it preliminarily views Amazon Web Services and Microsoft Azure as gatekeepers under the EU Digital Markets Act for their cloud computing services. After a seven-month investigation, the Commission said both providers serve as critical gateways between businesses and customers and hold entrenched, durable positions in the EU market, citing large user bases, lock-in effects, high switching costs, broad ecosystems, and the growing importance of their AI tools and partnerships in cloud procurement. The Dutch Authority for Consumers and Markets is supporting the investigations through a joint investigative team, while a separate EU probe is examining whether existing DMA rules are sufficient to address unfair or anti-competitive practices in cloud services.
Amazon Web Services rejected the preliminary assessment, arguing that European customers already have substantial cloud choice and warning that a gatekeeper designation could deter investment and innovation in Europe. Amazon and Microsoft can now exercise their rights of defence, and if the Commission confirms its findings, both companies would be formally designated as gatekeepers and given six months to comply with DMA obligations for their cloud businesses, marking a broader EU push on competition, data sovereignty, and reliance on major US technology providers.
See the reporting duties and controls this puts on the clock.
3 events from the most recent confirmed update back to the earliest known activity.
AWS responded publicly to the Commission's preliminary intent by arguing that European customers already have broad cloud choice and warning that additional DMA regulation could deter investment and innovation in Europe.
The European Commission informed Amazon and Microsoft of its preliminary view that AWS and Azure should be designated as gatekeepers for cloud computing services in the EU. The Commission said both firms act as important gateways and hold entrenched, durable positions supported by large user bases, lock-in effects, high switching costs, and broad ecosystems.
On 18 November 2025, the European Commission launched investigations into whether Amazon Web Services and Microsoft Azure should be designated as gatekeepers under the Digital Markets Act, alongside a separate probe into whether existing DMA obligations adequately address unfair or anti-competitive practices in the cloud sector.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
3 references tracked. Mallory keeps watching after this page renders.
itpro.com
Open sourceec.europa.eu
Open sourceec.europa.eu
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
European governments and organizations are intensifying efforts to achieve digital sovereignty in cloud infrastructure, driven by geopolitical uncertainties and concerns over reliance on American hyperscalers such as Microsoft, Google, and Amazon Web Services. With U.S. policy shifts and potential transatlantic tensions, European leaders are prioritizing the development of domestic alternatives and strategies to ensure control over sensitive data and critical workloads. Despite these ambitions, local cloud providers currently hold only a small share of the market, and experts suggest that a new European hyperscaler is unlikely to emerge soon, with existing players like SAP and Deutsche Telekom each controlling only about 2% of the market. In response to these sovereignty concerns, cloud providers are expanding offerings tailored to regulatory and data residency requirements. Amazon Web Services, for example, has introduced Dedicated Local Zones to provide customers with greater control over data location, security, and compliance, supporting sensitive workloads for public sector and regulated industries. These initiatives reflect a broader trend of cloud service adaptation to meet the evolving needs of European customers seeking to balance operational flexibility with strict sovereignty and compliance mandates.
Jun 29, 2026
Microsoft and Amazon Web Services (AWS) have announced significant enhancements to their cloud services aimed at addressing European data sovereignty and compliance requirements. Microsoft is introducing new features such as end-to-end AI data processing within Europe as part of the EU Data Boundary, in-country processing for Microsoft 365 Copilot interactions in select countries, and expanding Azure Local capabilities to support larger, more sovereign private clouds. These measures are designed to reassure European customers amid ongoing concerns about the reach of US laws like the CLOUD Act and shifting geopolitical dynamics, particularly following recent changes in US leadership. AWS has released a whitepaper detailing the design and objectives of its upcoming AWS European Sovereign Cloud, which will launch its first region in Brandenburg, Germany by the end of 2025. The new infrastructure will feature dedicated physical resources, logical isolation from other AWS regions, independent operational controls, and a distinct EU-based corporate governance structure. Both providers are responding to increasing demand from public sector and highly regulated industries in Europe for greater control over data residency, operational autonomy, and protection from extraterritorial legal requests.
Jul 2, 2026
European companies face significant regulatory and operational risks due to heavy reliance on US-based technology and cybersecurity providers, as conflicting laws such as the US CLOUD Act and GDPR create legal uncertainty over data access and privacy. In response to these challenges and increasing regulatory demands for data sovereignty, major cloud vendors are developing new solutions tailored to European requirements. Amazon announced the AWS European Sovereign Cloud, partnering with SAP to offer platforms that allow organizations to maintain greater oversight and control over their data, aiming to address concerns from sectors like government, finance, and healthcare. These initiatives reflect a broader industry shift toward sovereign cloud solutions to mitigate geopolitical and compliance risks for European businesses.
Jun 29, 2026