Machine Learning

The Sovereignty Illusion: Why European Tech Policy Is Building on Sand

European tech policy is building on a foundation that convenience will eventually wash away. There is a sturdier alternative.

AB
Alexander Baron
May 29, 2026
15 min read
More on this topic

European tech policy is building on a foundation that convenience will eventually wash away. There is a sturdier alternative.

Sovereignty is having a moment. Across Europe, in ministerial speeches, venture capital pitches, and corporate procurement frameworks, the word has acquired an almost talismanic quality. Digital sovereignty. Data sovereignty. Technological sovereignty. The implicit promise is always the same: that by choosing European-built, European-hosted, European-governed tools, institutions can insulate themselves from geopolitical risk, regulatory exposure, and the creeping dependency on platforms whose ultimate loyalties lie across the Atlantic. It is a compelling narrative. It is also, as a primary competitive strategy, a remarkably fragile one — and the history of technology markets offers very little comfort to those staking their futures on it.
THE PURCHASING DECISION HIERARCHYWEIGHT IN DECISIONDURABILITY AS ADVANTAGEMATCHABLE?Productivity & capabilityVery highPermanentHardCompliance & regulatory fitHighSector-specificMediumEcosystem depth & switching costVery highCompoundsVery hardSovereignty / values alignment ←ModerateErodesEasySovereignty ranks last on both durability and resistance to neutralisation — the two dimensions that matter most.

Fig. 1 — How sovereignty ranks as a purchase driver vs. structural alternatives

A Feature, Not a Foundation

To understand why sovereignty struggles as a durable value proposition, it is worth examining what actually drives purchasing decisions in B2B software markets. Organisations do not buy tools because of what those tools represent. They buy them because of what those tools do — for their productivity, their compliance posture, their operational efficiency, and their ability to retain and attract people who refuse to work with inferior software.

Sovereignty, in this framework, is a feature. A meaningful one in certain contexts, a decisive one in a narrow set of regulated industries — but a feature nonetheless. And features, unlike structural competitive advantages, are inherently vulnerable. They can be matched, neutralised, repackaged, or simply outweighed by a sufficiently capable alternative.

The evidence for this is not theoretical. It is written in the adoption curves of nearly every privacy-first, sovereignty-adjacent product of the past two decades. After the Cambridge Analytica revelations in 2018, surveys across Europe and North America showed dramatic increases in consumer concern about data privacy. Actual migration to privacy-respecting alternatives was modest and largely temporary. Signal gains users after every WhatsApp controversy and loses them again when the controversy fades and the convenience gap reasserts itself. Proton Mail has built a loyal and growing user base, but Gmail's dominance in the consumer market has never seriously wavered.

This is not hypocrisy. It is rationality. Organisations optimise for outcomes, and sovereignty is one path to certain outcomes — regulatory compliance, data control, geopolitical insulation — but rarely the only path, and often not the most efficient one.

The Neutralisation Strategy

Microsoft and Google understood this long before European policymakers did, which is why they have spent the better part of a decade quietly dismantling the sovereignty argument without ever conceding it. The approach is methodical: build data centres in Germany, establish local legal entities with genuine separation from US parent governance, negotiate bespoke contractual arrangements with European regulators, and obtain the certifications — ISO 27001, C5, BSI IT-Grundschutz — that allow procurement officers to check the compliance boxes without changing vendor.

The result is that a European hospital or government ministry can now deploy Microsoft 365 and make a credible compliance argument. The data does not leave Germany. The legal entity is European. The contractual protections are documented. Is this genuine sovereignty in the philosophical sense that Euro-Office's backers have in mind? Almost certainly not — American law can still reach American companies in ways that no data centre geography entirely resolves. But it is sovereignty that is good enough for most procurement committees, and in competitive markets, good enough is usually sufficient.

THE INCUMBENT NEUTRALISATION PLAYBOOKSTEP 1 — Local Data CentresBuild German/Dutch/Irish infrastructure. Data residency argument neutralised.Sovereignty gap: closingSTEP 2 — European Legal EntitiesEstablish local governance structures. Contractual separation from US parent.Sovereignty gap: narrowingSTEP 3 — CertificationsISO 27001, C5, BSI IT-Grundschutz. Procurement officers can check the boxes.Sovereignty gap: near zeroOUTCOME — "Good Enough" SovereigntyProcurement committee satisfied. No vendor change needed. Argument neutralised.The target is not genuine sovereignty — it is sovereignty that is good enough for the procurement committee.

Fig. 2 — How incumbents neutralise the sovereignty argument without conceding it

This is the fundamental trap that sovereignty-first European tech initiatives face. They are not competing against a static target. They are competing against incumbents with vast resources, deep enterprise relationships, and every incentive to neutralise the one argument that threatens their market position. Every month that passes, the sovereignty gap between a truly European platform and a sufficiently localised American one narrows — not because American platforms are becoming more sovereign, but because they are becoming better at appearing so.

The Only Positions That Hold

If sovereignty is insufficient as a foundation, what actually creates durable competitive advantage in B2B software? The answer, when stripped of marketing language, resolves into two structural positions — and only two.

The first is deep ecosystem integration. A tool that is woven tightly enough into an organisation's operational fabric creates switching costs that are practical, immediate, and felt daily. These costs are not ideological — they do not depend on the organisation continuing to believe in a particular narrative about data sovereignty or European values. They are functional. Switching means re-training staff, migrating data, rebuilding integrations, and absorbing the productivity loss of an unfamiliar environment. Microsoft 365's dominance in enterprise is not primarily a product story. It is a switching cost story. The calendar connects to the email which connects to the document which connects to the Teams meeting which connects to the project management tool. Leaving any one piece means disrupting all the others. That is not a feature. That is a structural moat.

The second is genuine domain specialisation. A tool that understands a specific professional domain at a depth that no generalist can match creates a different kind of switching cost — one rooted in capability rather than friction. When a legal platform can read a contract and identify that an indemnification clause contradicts a liability cap three pages later, or flag that a termination provision is unenforceable in the jurisdiction specified, or surface the counterparty's historical pattern of redlines from previous negotiations, it is offering something that Microsoft Word cannot offer and will never prioritise offering. The market it serves is too narrow to justify the investment at Microsoft's scale. That narrowness is precisely the protection.

COMPETITIVE MOAT: COMPOUNDING VS. STATICTime →Competitive advantage →Y0Y2Y4Y6Y8Sovereignty(erodes)Domainspecialisation(compounds)Ecosystemdepth(compounds)Neutralisation inflection

Fig. 3 — Compounding moats vs. the static sovereignty claim: advantage over time

Both positions share a critical property that sovereignty lacks: they are self-reinforcing. An ecosystem deepens its integration over time as more tools join and more workflows depend on it. A specialised tool accumulates domain knowledge — through data, through user behaviour, through the refinement of its models — that makes it progressively harder for a newcomer to replicate. Sovereignty, by contrast, is a static claim. It does not compound. It does not get harder to match over time. It simply sits there, waiting to be neutralised.

The Middle Ground Is a Graveyard

The most dangerous position in a disrupted B2B software market is the one that Euro-Office currently occupies — and the one that a surprising amount of European tech policy implicitly endorses. It is the position of the capable generalist with sovereign credentials: broad enough in scope to avoid deep specialisation, not embedded enough in any single ecosystem to create genuine switching costs, and relying on sovereignty as the differentiating factor that justifies the choice.

This position has a historical analogue in every technology transition of the past three decades, and its fate is consistent. The capable generalist with a values-based differentiator wins early adopters — the ideologically motivated, the regulatory vanguard, the organisations for whom the values proposition genuinely resonates. It builds a user base. It generates momentum and press coverage and political support. And then, as the market matures, it discovers that the early adopters were not representative of the broader market, that convenience and capability outweigh values for the majority of procurement decisions, and that the incumbents have done just enough to neutralise the values argument for everyone who was not already committed.

A Different Ask of European Tech Policy

The implication of this argument is uncomfortable for a policy community that has invested heavily in the sovereignty framing. It is not that sovereignty is irrelevant — in legally mandated contexts, in genuinely regulated industries, in defence and intelligence and healthcare, the compliance dimension creates real and durable demand. But it is a ceiling, not a foundation. Building a European tech sector around sovereignty-first positioning is building around the one competitive dimension most vulnerable to being neutralised by a well-resourced incumbent with a localisation strategy.

The more strategically coherent investment would be in the conditions that produce genuine ecosystem depth or genuine domain superiority. That means funding the development of domain-specific AI models trained on European professional data — legal, medical, financial, administrative — that create capability advantages no American generalist can quickly replicate. It means building interoperability standards that make it easier for European tools to form ecosystems with each other, rather than each competing individually against American giants. It means investing in the talent pipelines and research institutions that produce the specialised expertise from which domain-superior products emerge.

WHERE POLICY INVESTMENT COMPOUNDSCURRENT FOCUSSTRATEGICALLY COHERENTSovereignty-first procurement criteriaCompliance certifications & policy docs"European-made" branding & narrativesErodes as incumbents localiseDomain-specific AI models (legal, medical)Interoperability standards between EU toolsTalent pipelines & domain research institutionsCompounds over time, hard to replicate

Fig. 4 — Redirecting policy investment toward positions that compound

None of this is as rhetorically satisfying as sovereignty. It does not fit on a ministerial banner or translate easily into a procurement criterion. But it produces competitive positions that compound over time rather than eroding — positions that do not depend on the geopolitical weather remaining stormy enough to keep the sovereignty argument alive.

Ready for the next step?

Book a demo with our team and see top.legal in action

More on the topic