- The initiative aims to reduce dependence on non-European tech giants by keeping 40% of public data in a locally managed sovereign cloud.
- A massive investment of 481 million euros has been allocated for a contract spanning the next eight years.
- The infrastructure will meet the SEAL 3 security standard, ensuring data remains strictly under European jurisdiction and laws.
- The project is integrated into the ESTRATEC plan, which includes other high-tech developments like the AI gigafactory in Móra la Nova.
The Government of Catalonia has officially set in motion a transformative project to establish a sovereign public cloud, a move that marks the region’s most significant technological investment in recent years. This initiative is designed to handle the storage and management of sensitive data for public institutions and private companies alike, moving away from a total reliance on foreign digital infrastructures. By creating a local hub for information, the administration hopes to gain greater control over essential services that affect the daily lives of citizens.
This ambitious roadmap is part of the broader ESTRATEC strategy, which focuses on technological autonomy to shield local operations from global geopolitical tensions. Officials have noted that recent global events and market instabilities have highlighted the risks of being overly dependent on massive tech firms from the United States or China. The goal is to build a more resilient and secure digital framework that can operate independently even if external disruptions occur in the global market.
Breaking the Big Tech Monopoly
Currently, a staggering 70% of the European cloud market is controlled by a handful of American companies, a situation that has raised concerns about data privacy and legal jurisdiction. Under the U.S. Cloud Act, for example, foreign governments could potentially access data stored on servers owned by American firms, regardless of where those servers are physically located. Catalonia’s new project seeks to bypass these risks by ensuring all information stays under the protective umbrella of the European General Data Protection Regulation (GDPR).
To achieve this, the tender for the new cloud service will likely be restricted to European integration firms, effectively prioritizing local and continental expertise over global tech giants. This ensures that the provider is subject exclusively to European law, providing a layer of legal certainty that was previously missing. The contract, valued at roughly 481 million euros, is expected to run for an initial period of eight years, providing the stability needed to migrate complex systems away from their current setups.
A New Hierarchy for Public Data
The transition won’t happen overnight, but the plan outlines a very specific hybrid ecosystem for data management. At the moment, about 80% of the Generalitat’s information is held in private clouds, while only 20% sits in conventional public ones. By the year 2028, the government intends to shift these numbers significantly, aiming for 40% of its services to be hosted in the new sovereign cloud, while the remaining 60% will be split equally between private and conventional public providers.
Sensitive information such as health records, police databases, and traffic management systems will be the first to move to this high-security environment. These services require not only the highest level of privacy but also rapid processing speeds in real-time, sometimes in real-time. By utilizing the region’s own 8,000-kilometer fiber optic network, the sovereign cloud will offer the low latency necessary for these critical applications to function without a hitch.
Built on Local Ground and European Law
One of the most important technical requirements is that the data must be physically stored within Catalonia. While the specific data center location will be chosen by the winning bidder, the infrastructure must be connected to the public connectivity network of the country. This physical proximity, combined with the SEAL 3 certification—the highest sovereignty level currently available—guarantees that the administration maintains full traceability and control over every byte of information.
This project doesn’t exist in a vacuum; it is closely linked to other major tech milestones like the quantum ring of Barcelona and the proposed AI gigafactory in Móra la Nova. Together, these initiatives form a comprehensive model for digital competitiveness, positioning the region as a leading European hub for advanced technology. The cloud infrastructure is expected to be partially operational by the second half of 2027, with a full rollout scheduled for the third quarter of that same year.
The successful implementation of this sovereign cloud will fundamentally change how the regional government interacts with technology providers while bolstering the digital trust of its citizens. By prioritizing local jurisdiction and high-level security standards, the administration is preparing for a future where digital self-sufficiency is just as important as physical infrastructure. This strategic shift ensures that sensitive public records remain protected by the most stringent laws, fostering a safe environment for innovation that benefits both the public sector and the growing local tech industry for the coming decade.
