Cloud, Data Sovereignty
Airbus Makes Legal Jurisdiction a Formal Criterion in Cloud Vendor Selection
The aerospace giant's choice of Scaleway for sovereign cloud services signals a shift: protection from US extraterritorial law enforcement is now a scored technical requirement, not a policy debate.
InfoQ
Airbus has named French cloud provider Scaleway as its sovereign infrastructure partner following a competitive tender that explicitly scored vendors on legal and governance protections. What makes this milestone significant is not simply the vendor chosen, but rather how the evaluation framework treats regulatory exposure: shielding operations from non-European laws is now a formal procurement criterion measured alongside technical performance.
How Airbus Restructured Its Procurement Model#
The aerospace and defence group evaluated candidates across three dimensions. Technical assessment examined cloud capabilities—including AI infrastructure, interoperability, and scale. Operational metrics focused on security, resilience, service continuity, and alignment with Airbus' multi-cloud footprint. The decisive third pillar was legal and governance safeguards: European jurisdiction, data protection compliance, and crucially, insulation from non-European extraterritorial legislation.
Catherine Jestin, Airbus' executive vice president for digital, framed the rationale in explicit terms: the arrangement keeps "critical data assets shielded from foreign extraterritorial laws" while maintaining control over aerospace operations and digital infrastructure. That language carries practical weight—the US CLOUD Act grants American authorities the power to demand data from US-headquartered providers regardless of where physical infrastructure sits or whether an EU subsidiary operates it.
Real Precedent Reshapes the Calculation#
The shift from theoretical to actionable accelerated after concrete incidents. An ICC prosecutor lost access to his Microsoft email after being sanctioned by executive order in 2025. Export controls in June briefly suspended access to Anthropic's Claude and Mythic AI models across Europe. These examples transformed the risk from hypothetical into lived operational reality—as one technology practitioner summarized the procurement logic: "You can't build a business on a vendor who may be forced to block you at any moment."
The deal supports aircraft design, engineering, manufacturing, and enterprise operations on infrastructure built from European technology. Airbus frames this as a complement to its existing multi-cloud strategy—not a wholesale migration, but a jurisdictional-tier approach where workloads deploy to environments matching their technical and regulatory exposure.
