What “sovereign” actually means — and how European governments, defence and critical infrastructure are deciding.
What changed this summer — and why it is a platform decision, not a vendor swap
What a Foundry-class platform actually is: four layers
The five sovereignty tests, applied live — Xavier, on a real estate
The European field, fairly — one slide
Where Scrydon fits — and where it doesn’t
The procurement checklist, then Q&A
Questions in the chat as they occur to you — we take them at the end. Replay and transcript on scrydon.com the week after.
AI for government and defence. Former Senior Manager and Lead Cloud Architect for EU institutions & NATO at Microsoft.
Data and agentic AI. Former co-founder & CTO at Composabl, ex-Microsoft. He built the estate you will see at minute ten — and he operates it.
An engineering team drawn from Microsoft and Google · delivered with partners including delaware · recently at NATO TIDE Sprint 44, VivaTech 2026 and UC Law SF · scrydon.com/about-us
For a decade it was a “should we?” conversation. This year ended it.
The Commission awarded €180 million of sovereign cloud — scored on sovereignty, not just price.
Tendered October 2025, awarded April 2026: four European providers, not a single winner — for the EU institutions, bodies and agencies, selected under a published Cloud Sovereignty Framework: eight objectives, scored at set assurance levels. Not a policy paper. A contract.
Sovereignty moved from the preamble to the award criteria — with a methodology anyone may reuse.
You can copy the scoresheet into your own tender tomorrow.
And note what it bought: the cloud layer. The AI and data layers above it — where the decisions live — are still the open question. They are this session.
France’s DGSI and Germany’s BfV moved towards European platforms for their most sensitive analytical work.
The interior intelligence services of the two largest member states — the most demanding analytical users on the continent, and historically reference customers for the American platforms.
If a European platform can carry their workload, capability is no longer the automatic counter-argument.
“Not possible in Europe” stopped being an argument and became an excuse.
The Bundeswehr’s defence cloud excludes vendor-operated systems — not by name, by construction.
“Vendor-operated” means the supplier’s staff hold the administrative keys and run the system on your behalf — which is how Foundry-class platforms are usually delivered.
A requirement written this way disqualifies a delivery model, not a logo — and every future tender can copy the clause.
Who operates the platform is now on the scoresheet, next to what it does.
Paris and Berlin put a “sovereign digital backbone” on paper.
A communiqué builds nothing by itself. What it builds is cover: every procurement officer who was already uneasy now has a policy to cite — and budget lines follow policies.
Most of Europe is mid-sized. They will not swap one dependence for another.
Belgium, the Netherlands, Poland, Spain, the Nordics — less vocal than Paris and Berlin, with the same exposure and less leverage. A national champion with a different flag is the same problem in a different language.
Ukraine made it undeniable: data is the strategic asset — and not only in defence.
The institutions that kept functioning were the ones whose data, and the ability to decide on it, stayed available and under their own control. A bank, a grid operator, a hospital runs on exactly the same asset.
Dependency you mostly cannot escape. Dependence you very much can.
Nobody here will fab their own silicon or train every frontier model — that dependency is real, and it is not the point. The point is dependence: someone else deciding how you use what you run on. Conflating the two is how organisations conclude sovereignty is impossible — and sign the renewal.
The test: when the vendor changes the terms, what stops working — and how fast?
Nobody concluded the software was bad. They concluded dependence is a decision in its own right.
The rest of this session is that question.
This is not a vendor swap. It is choosing the layer your decisions run on.
Whoever owns that layer owns your switching cost. Choose it like infrastructure, not like a licence.
CADA’s top levels are about ownership, control and supply chain — not where your servers stand.
The Commission’s Cloud and AI Development Act (June 2026) sets four assurance levels for sensitive public and critical-sector workloads. The top levels cannot be retrofitted: ownership and supply chain are decided the day you sign.
Sovereign infrastructure with a non-sovereign superstructure is half a solution.
Pipelines, lakehouse, governance. Data in, trustworthy, catalogued.
A shared operational model — entities, relationships, state — that people, applications and AI read and write.
Models and agents acting on the same ontology — governed, permissioned, audited.
End-to-end processes across people, agents and systems — written back, under policy, with audit.
An alternative answers for all four layers — or it is a component with a roadmap.
Getting data in, trustworthy and catalogued. Necessary — and table stakes.
Pipelines, lakehouse, governance, catalogue. A decade of European data-platform investment lives here, and nothing above it works without it. But this layer answers what is true, not what should we do.
A shared operational model of your world — that people, applications and AI read and write.
Entities, relationships, state and rules: an aircraft, its parts, its crew, its mission — as living objects, not rows in seventeen tables. This is the layer Palantir genuinely got right, and the one most alternatives quietly skip.
Agents acting on the same model, under the same policy, leaving the same audit trail.
An agent gets an identity and scoped permissions, retrieves from the ontology rather than raw tables, and every action is recorded. Capability is the easy half; governance is the layer. And keep the model swappable: a model you can replace in an afternoon is a supplier — one your processes have grown around is a landlord.
End-to-end processes, made visible and executable — every step routed to a person, an agent or a system.
Most organisations’ processes live in siloed systems or in people’s heads. Process flows put them on the model: each step acts on the ontology under policy, and the outcome is written back to the systems where work happens — with an audit record a reviewer will accept. This is where a data platform becomes an operations platform.
All four layers — or a component with a roadmap.
It is the fastest filter you will apply to any pitch this year. Including ours, in fifteen minutes.
Layers describe what a platform does. Sovereignty is about who controls it — which is the next fifteen minutes.
Five dependence tests — who decides, not where it was built. Each has a yes-or-no answer. A vendor who answers with an adjective has answered.
Five backup slides sit behind this one — one per test, what passes and what fails. Press h to pull them into the deck if the screen share dies. Questions in the chat; we batch them for the end.
Which legal entity operates the platform, under which law — and which foreign statutes can compel it?
Data location is not jurisdiction. A data centre in Frankfurt operated by a non-EU parent answers to that parent’s law — a “sovereign region” is a real-estate answer to a legal question.
Who generates, holds and revokes the keys — and can you do all three without asking the vendor?
If the vendor can decrypt when compelled, tests one and two fail together — and the padlock icon on the datasheet is decoration.
Whose hands are on the admin plane — and is that in the contract, or in the brochure?
This is the test the Bundeswehr requirement is really about: “vendor-operated” means the supplier’s people hold root on your decisions.
What still works with the cable unplugged — ingestion, identity, ontology, agents, updates, evidence out?
For defence and critical infrastructure — the grid, the hospital, the port — disconnected is the design case, not the edge case. It is also the honest proxy for every other test: no connection, no hidden dependence.
What leaves with you — data, ontology, process flows — in what format, at what cost, rehearsed when?
The switching cost is set at signature, not at exit. This is the test almost nobody runs before signing — and the reason this is a platform decision.
The field is real and growing — an ecosystem, not a new champion. The five tests are how you sort it — vendor by vendor, kept current: scrydon.com/platform/compare
Built in the shape of the four layers, because that is the shape of the problem. We didn’t build the accelerators and we didn’t train every model — the dependency stays. The dependence goes.
Hold every vendor to this sheet. We just went first.
And if it might be us: the price of finding out is on the next slide.
The days and the pilot are credited against your first platform year. Evaluating us properly costs nothing if you go ahead. Whoever you shortlist — including us — take the next slide into the room.
Which legal entity operates the platform, under which governing law — and which foreign statutes can compel it? In writing.
Who generates, holds and revokes the encryption keys? Can you rotate them — and lock the vendor out — without asking?
Whose staff hold admin access — nationality, clearance, employer — named in the contract, not the brochure?
Has disconnected operation been demonstrated — including updates, identity and evidence export — not just described?
Is the exit tested and priced before signature — data, ontology and process flows out, in open formats?
Does the offer answer for all four layers — data, ontology, AI, process flows — or one layer plus a roadmap?
Will each answer be demonstrated on a live system — or only asserted on a slide?
If any answer is a slide rather than a demonstration, you have your answer.
And the lesson from the Union’s own tender: write procurement so it increases competition, not reduces it. Four providers, not one — a shortlist with alternatives is leverage; a single winner is the next dependence.
We won’t collect your details to sell you something afterwards — a person follows up only if you ask.
All five sessions: 11:00 CEST · 45 minutes · free · a live system, not a deck. Replay and transcript the week after.
“Sovereign” is not a label on a datasheet.
It is five tests you can run against a live system — and a platform decision you only make once.
The checklist — in the replay, and on the site next week
Next: 17 Sep — inside the AI OS, live on a cluster
Pre-read: scrydon.com/platform/compare/palantir-foundry-alternative
All sessions, registration and replays · scrydon.com/webinars
What we learn about sovereign AI — a few times a year, when there is something worth reading.
scrydon.com/newsletter
Nathan Bijnens & Xavier Geerinck · Ghent · scrydon.com