Today @BeLibre@mastodon-belgium.be published an article, "Beyond the Marketing: Measuring Microsoft’s Cloud Sovereignty in Europe".
In it, they publish a study where they measure how does Microsoft Cloud Stack measire in the European Commission’s Cloud Sovereignty Framework, since "people at Microsoft were asked, but did not answer how its services perform against this framework, while an estimated 90–95% of Belgian government services currently depend on Microsoft infrastructure."
The dependency is not a Belgium exclusive, and this study is relevant for all other EU countries (and beyond, I dare say).
To summarized conclusion is only clear in the actual document, where it claims:
BeLibre recommends organisations to implement stratified procurement: If needed, Microsoft services can be used for lower-classification workloads; European providers or self-hosted open-source for higher-classification workloads requiring SEAL-3+ across all objectives.
(SEAL-3+ is everything classified secret or top-secret)
Timeline Sandbox