European Sovereignty Monitor

Policy and law

France makes SecNumCloud or EUCS qualification mandatory for State data hosting

France's Decree No. 2026-272 makes SecNumCloud or equivalent EUCS qualification mandatory for cloud providers hosting the State's most sensitive data, covering named administrations and six public-interest groupings, two years after the SREN law required it.

Verified AI-drafted Legifrance, Decree No. 2026-272 of 14 April 2026

What it does not test. Does not establish that any current host lacks the qualification or that a migration away from a non-qualified provider has begun.

How this item counts. Towards autonomy: it changes whose law governs. Binding 3 of 3 (in force or operating), scale 2 of 3 (medium), Verified counts in full: weight +6 of 36 possible. Decree in force requires SecNumCloud/EUCS (foreign-law shield) for national State data hosting. European Sovereignty Index

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above and published under the editor’s responsibility without a person reading it first. How the record is made

What the tags mean: VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool

All Policy and law news →