Why it matters where your data is stored

  • 2023-08-12 02:33:29

Mattias Åström glances out of the office window in France. "Look at all the beautiful roads and bridges here," says the founder and chief executive of Evroc.

"You can see what we built hundreds of years ago. Now, we're letting foreign companies build our critical infrastructure."

He's talking about digital infrastructure: the hardware and software, data centres and communications networks that power modern business.

There's growing concern in Europe about digital sovereignty, the region's ability to control its own data and technology.

For example, Europe is heavily dependent on US firms for cloud services - the remote computing and data storage services dominated by US companies including Amazon and Microsoft.

It can cause problems when the data of European customers is stored in a US cloud service, as there can be a conflict between the laws that apply.

The General Data Protection Regulation (GDPR) requires organisations in the EU to protect personal data, and the UK has equivalent data protection laws.

At the same time, US laws give intelligence and law-enforcement services broad powers to access data.

That conflict was underlined In May, when Facebook was fined a record €1.2bn (£1bn) for having inadequate safeguards for data sent from the EU to the US.

"The American authorities have the right to go in and see any data that is stored in an American cloud, even if the data centre is in Europe," Mr Åström says.

"We don't want any foreign states to be able to access information stored by European customers or companies."

Mr Åström is the founder and chief executive of Evroc, which is headquartered in Stockholm.

The firm believes there's an opportunity to create what it calls Europe's first "sovereign hyperscale cloud".

That means it's fully under the jurisdiction of European law, and it's big enough to rival the major US cloud providers: Amazon Web Services (AWS), Microsoft and Google. They have a 65% share of the world cloud market between them, according to Synergy Research Group.

Evroc has secured €15m in seed funding and plans to build eight data centres in Europe in the next five years. The first will be a large pilot data centre in Sweden next year.

Mr Åström sees technological independence from the US as a critical aspect of digital sovereignty.

"We've seen the US restricting certain components from being exported to China," he says. "Let's say there is a conflict in China and Taiwan. What do you think will happen if computing is a scarce resource? Do you think the US will look after its own interests or help their European friends?"

Cloud computing firm Ionos already positions itself as the European alternative to US tech giants, out of the reach of the US Cloud Act.

That's the law that gives US authorities access to servers owned by US cloud companies, even if they're outside the US.

Ionos develops all its software in Europe, and its European servers are isolated from the US.

"It's about trust," says Rainer Straeter, its head of cloud development and digital ecosystems. "Do we really think that the Cloud Act will [hit] a small business around the corner? We don't know. This 'don't know' makes us a bit nervous."

Responding to the issue of digital sovereignty, a spokesperson for Amazon Web Services said that between 1 July and 31 December 2022 there were no data requests that resulted in disclosing data stored outside the US to the US government.

In addition the firm said: "AWS will challenge any law enforcement request for customer data from any governmental bodies where the request conflicts with EU law, is overbroad, or we otherwise have any appropriate grounds to do so."

Nevertheless, European firms continue their efforts to form rival cloud services.

Ionos is among 377 organisations participating in the Gaia-X project, which aims to join up cloud service providers in a federated system, so data can move between them while data owners remain in control.

"None of the European cloud providers can build everything on their own to compete with AWS," says Mr Straeter. "The resources available are not enough. We have to take the European way, be a bit cleverer than anybody else, and define standards. If all the [European] cloud providers were able to share an ecosystem, we would be much stronger than AWS, Google and Microsoft."

Mr Straeter believes it's important for Europe to have resilient infrastructure, following a run of crises that include the financial crisis of 2007 to 2009, Covid-19, and the war in Ukraine.

"Federated networks are more resilient, more stable," Mr Straeter says. "We know this from the domain name system in the internet. It's rock solid because it's super distributed."

Tags

Related