Insight

Sovereign cloud with hyperscalers: understanding your options and choosing the right architecture

Digital Services
Cybersecurity
IT Operations

Within Cronos Europa’s Sovereign Tech series, we explore how different approaches to cloud sovereignty can be combined in practice.

The challenge

The result

Digital sovereignty is often framed as a binary choice: commit to European infrastructure or remain dependent on hyperscalers. In reality, most organisations operate across a spectrum.In reality, most organisations operate across a spectrum.  

We spoke with Michael Kelarou, Cloud Expert at Arxus, a sister company within De Cronos Groep, to understand how organisations can navigate this spectrum, from sovereign public cloud with built-in controls, to Azure Local, to fully private cloud environments.

Michael Kelarou, Cloud Expert at Arxus
“Sovereignty is not a destination. It’s a set of deliberate choices about what you control, where you run, and whether you can move when the rules change.”
Michael Kelarou, Cloud Expert at Arxus
“Sovereignty is not a destination. It’s a set of deliberate choices about what you control, where you run, and whether you can move when the rules change.”

Sovereignty is a spectrum, not a binary decision

The binary framing of sovereignty actually holds organisations back. Real sovereignty looks more like a spectrum.

On one end, sovereign public cloud environments offer built-in controls: data residency, confidential computing, operator access restrictions, and EU Data Boundary compliance. On the other end, sits fully private infrastructure, operating entirely within your own or a trusted partner’s environment, local or European.  

Between these extremes, there are meaningful options.

Solutions such as Azure Local or sovereign private cloud environments allow organisations to apply control where it matters most, without giving up the benefits of cloud.

Most organisations don't need to choose one extreme. What they need is clarity about which workloads require which level of control, and a roadmap that can evolve as regulations and geopolitical conditions change.

Defining a sovereignty strategy in practice

A sovereign cloud strategy starts with understanding workloads.

Not every system requires the same level of control, and applying sovereign infrastructure everywhere introduces unnecessary cost and complexity.

Start by identifying genuinely sensitive workloads: those subject to strict regulation, carrying real operational or reputational risk, or needing to function even if connectivity to public cloud is disrupted.

From there, assess three dimensions:

  • where data must reside
  • who can access it (and who must never access it)
  • and what happens to business continuity if that environment becomes unavailable

This last dimension has become critical. Business continuity planning now needs to account for geopolitical disruption, not just technical failure or natural disaster.

Where Azure Local fits within a sovereign architecture

Azure Local is the right choice when organisations need Azure-native capabilities but have workloads that cannot or should not run in the public cloud.

This applies for:

  • edge or disconnected scenarios
  • environments with strict data residency requirements
  • latency-sensitive environments

It allows organisations to combine familiar Azure tooling with more control over where workloads run.

A growing use case is sovereign AI, where organisations want to benefit from AI capabilities while maintaining control over data used in training and inference. Azure Local, with Foundry Local, allows organisations to run AI workloads locally, gaining productivity benefits without compromising data governance.

Architecture defines sovereignty, not platform selection

Technology alone does not guarantee sovereignty.

Azure Local, like any platform, only contributes to sovereignty when embedded in well-designed architecture.

Sovereignty is therefore defined by architectural choices.

Portability, open standards, and infrastructure-as-code practices determine whether organisations retain the ability to adapt and move over time. The difference between genuine control and its appearance lies in design-time decisions, not in platform selection.

Common misconceptions around hyperscalers and sovereignty

Several misconceptions still shape how organisations approach this topic.

One of the most common is the assumption that data residency automatically equals sovereignty. In practice, the key question is not only where data is stored, but who can access it, under which legal conditions, and how access is technically controlled.

Another misconception is that sovereignty requires organisations to move away from hyperscalers entirely. For many, this would mean losing access to innovation, scalability, and ecosystem integration. The objective isn’t independence, but avoiding a single point of failure and retaining the ability to move when needed.

A balanced approach to sovereign cloud in Europe

Sovereign cloud is not about replacing one model with another.

It is about creating a balanced architecture that aligns with organisational priorities.

In practice, this often results in a layered approach.

Public cloud can support scalable, less sensitive workloads. Azure Local or private cloud environments can be used where additional control is required.

What matters is that these choices are deliberate, and that organisations retain visibility and control across the entire landscape.

Within Cronos Europa, we see this as part of a broader sovereignty strategy. Together with partners such as Arxus, we support organisations in designing architectures that combine innovation, flexibility, and control.

If you would like to explore what this means for your organization, feel free to reach out. Our teams are ready to support you

No items found.
No items found.
Stay connected

Want to stay up to date? Get our latest news on LinkedIn

Stay connected

Want to stay up to date? Get our latest news on LinkedIn

We value your privacy! We use cookies to enhance your browsing experience and analyse our traffic.
By clicking "Accept All", you consent to our use of cookies.
Dark blue outline of a cookie icon.