Local contracting entity & EU governance (operational model)

Why important?

A clear contracting party, responsibilities and governance for operations and support in the EU.

How measured?

• 0 = Contract/responsibility primarily with a non-EU entity
• 1 = EU contracting claimed, governance/accountability unclear
• 2 = EU contracting in place, but governance/decision rights weak
• 3 = EU contracting + defined EU governance (roles/boards/accountability)
• 4 = EU contracting + strong EU governance, clear rights/controls documented
• 5 = EU contracting + EU governance with real decision and control rights, contractually evidenced
• N/A = no reliable evidence

Sources / Evidence

• https://aws.eu/de/
• https://www.aboutamazon.eu/news/aws/built-operated-controlled-and-secured-in-europe-aws-unveils-new-sovereign-controls-and-governance-structure-for-the-aws-european-sovereign-cloud
• https://stackit.com/en/why-stackit/benefits/data-sovereignty
• https://corporate.ovhcloud.com/en/newsroom/news/secnumcloud-qualification-bare-metal-pod/
• https://stackit.com/en/imprint
• https://www.stackit.de/en/newsarticle/stackit-independent-company/
• https://www.t-cloud-public.com/en/benefits/sovereignty
• https://www.oracle.eu/faq/
• https://www.plusserver.com/en/company/about-us/
• https://www.exoscale.com/about-us/
• https://www.hetzner.com/de/european-cloud/
• https://www.scaleway.com/en/about-us/
• https://news.microsoft.com/de-de/erste-souveraene-cloud-plattform-fuer-die-deutsche-verwaltung-auf-der-zielgeraden/

Validation questions (RFP)

• Which legal entity is the contracting party? Which sub-processors? Who decides on government requests?

Scores comparison