European Sovereignty Monitor
Subscribe Suscribirse

Policy and law

France makes SecNumCloud or EUCS qualification mandatory for State data hosting

France's Decree No. 2026-272 makes SecNumCloud or equivalent EUCS qualification mandatory for cloud providers hosting the State's most sensitive data, covering named administrations and six public-interest groupings, two years after the SREN law required it.

Policy and lawCompute and infrastructure All Policy and law news →

Verified Legifrance, Decree No. 2026-272 of 14 April 2026

What it does not test. Does not establish that any current host lacks the qualification or that a migration away from a non-qualified provider has begun.

How this item counts. Towards autonomy: it changes whose law governs. Binding 3 of 3 (in force or operating), scale 2 of 3 (medium), Verified counts in full: weight +6 of 36 possible. Decree in force requires SecNumCloud/EUCS (foreign-law shield) for national State data hosting. European Sovereignty Index

Previously in Policy and law

Verified ANSSI leads G7 call for urgent shift to post-quantum cryptography Reported EU Commission sends AI Act information requests to over 30 companies Reported EU antitrust officials seek information on Oracle's cloud licensing practices

All Policy and law news →