Dutch government picks German cloud provider StackIT to start loosening its US tech grip

The Dutch government has signed its first cloud framework agreement with a European provider, and the timing says as much as the deal itself. Germany’s StackIT, part of the Schwarz Group that operates Lidl and Kaufland, now sits alongside Google, Microsoft, and Amazon as an approved cloud supplier for Dutch ministries and government bodies. Under the arrangement, public sector organizations can procure cloud services from StackIT under pre-agreed terms, with data required to stay within the European Economic Area and government audit rights built into the contract from the start.

The context driving this decision has been building for some time. Research by Dutch public broadcaster NOS found that 67 percent of roughly 16,500 websites run by government bodies, hospitals, schools, and other essential organizations connect to at least one American cloud service. Under the US Cloud Act, American cloud providers can face legal obligations to share data with US authorities even when that data sits on servers inside Europe. That exposure has moved from a technical compliance concern to a political pressure point, with Dutch MPs increasingly vocal about keeping government data in European hands.

Junior minister for the digital economy Willemijn Aerdts framed the deal around choice rather than restriction, describing digital autonomy as the ability to select from a diverse range of providers rather than defaulting to a small group of dominant platforms. Justice and security minister David van Weel was more direct, calling the agreement an important step toward reducing dependence on parties outside Europe and strengthening the country’s digital resilience.

The StackIT framework carries no migration obligations and sets no minimum spending commitments, which means government organizations retain full discretion over whether and when to shift workloads. The contract also includes clauses allowing termination if StackIT passes into non-European ownership, closing the same jurisdictional gap that currently creates anxiety around the pending Kyndryl takeover of Dutch cloud firm Solvinity, which operates the DigiD digital identity system used by most residents to access tax, health, and public services.

For the European cloud industry, a government-level framework agreement with the Netherlands carries symbolic weight beyond the immediate commercial terms. It demonstrates that sovereign cloud alternatives can clear the procurement bar that public sector organizations set, which other European governments watching this development closely will find difficult to overlook.