Lidl’s parent company, KPN are building sovereign cloud for the Netherlands

KPN and Schwarz Digits, the digital arm of the company behind Lidl and Kaufland, are building a sovereign cloud region in the Netherlands, with a target launch of mid-2027. In practice, the service will run from KPN data centers, use the STACKIT cloud platform that Schwarz Group developed for its own retail operations, and be sold through KPN’s existing network of business customers and partners.

The combination of names is unusual enough to deserve a second look. For starters, this is not a tech startup or a legacy IT vendor making a sovereignty pitch. One partner is a national telecom operator that Dutch enterprises already trust for connectivity. The other, meanwhile, is a retail conglomerate that built cloud infrastructure to run one of Europe’s largest supermarket chains and now wants to sell that capability to the broader market.

For regulated Dutch organizations, the appeal is fairly straightforward. Government agencies, banks, energy companies, and hospitals have grown more cautious about where sensitive workloads sit and which jurisdiction governs them. As a result, each of those organizations faces some version of the same question: what happens to this data if a cloud provider receives a legal demand from a foreign government? A locally owned, locally operated cloud at least narrows that exposure considerably.

Moreover, STACKIT, the platform powering the service, runs on open-source software and has cleared Germany’s BSI C5 cloud security assessment, which gives compliance and risk teams something concrete to reference. Additionally, the Dutch region will connect to existing STACKIT infrastructure in Germany and Austria, helping cross-border organizations manage data placement and redundancy across multiple European sites at once.

That said, the harder test comes after launch. Sovereignty works well as a differentiator for specific workload types, particularly regulated data stores, government applications, and backup environments. Convincing organizations to migrate deeply embedded workloads away from hyperscalers they have relied on for years, however, is a different kind of conversation entirely, one involving budget cycles, developer familiarity, and technical capability that goes well beyond jurisdiction.

KPN co-signed the Open Cloud Alliance manifesto earlier this year, pushing for clearer rules around data location and access transparency. That public stance sets expectations. Ultimately, whether the 2027 launch delivers infrastructure that matches that ambition is what the Dutch market will judge it on.