Airbus has described a workload-sensitive approach to digital sovereignty, and Scaleway announced on July 16, 2026, that Airbus selected it as a sovereign cloud provider for selected enterprise applications. Those announcements explain the decision and its stated criteria; they do not publicly verify the controls in place for each workload or how those controls are maintained over time.
What does Airbus mean by digital sovereignty?
Airbus describes four pillars of digital sovereignty. They are objectives to weigh against the needs of a particular workload, not a claim that every system should run in the same kind of cloud.
As an Amazon Associate I earn from qualifying purchases.
Operational continuity
Airbus’s stated aim is to keep critical operations running reliably. For a cloud workload, that makes resilience, service continuity, and recovery arrangements relevant alongside the provider’s technical features.
Control over data access
Airbus says sovereignty includes controlling access to data and limiting exposure to extraterritorial laws. The question is not just where data is stored: a workload assessment also needs to examine who can access it, under what authority, and how that access is governed.
#1 Best Overall
Economic predictability
Airbus includes long-term predictability and reduced vendor lock-in in its definition. Portability and a workable exit plan therefore matter, as do the terms that govern ongoing use.
Technological participation
Airbus also describes technological sovereignty as participating in the development of critical components. That is a broader consideration than data location or legal jurisdiction alone.
Airbus says it prioritizes sovereign solutions for military applications and critical intellectual property, while balancing sovereignty with technology and security needs elsewhere. The implication is a placement decision by workload: sensitivity and risk influence the choice, but they are not the only factors.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Rank #2
What did Airbus select from Scaleway?
In its July 16, 2026 announcement, Scaleway said Airbus selected it as a sovereign cloud provider for selected enterprise applications. Scaleway described the intended applications as requiring strong governance, resilience, and legal protection, and said the platform would support business-critical work across aircraft design, engineering, manufacturing, and enterprise operations. These details describe the provider’s announcement; they are not an independently published account of implementation status.
Scaleway said Airbus’s competitive tender assessed technical capability, operational excellence, and legal and governance safeguards. The following table summarizes the dimensions described in that announcement.
| Assessment area | What Scaleway said Airbus considered |
|---|---|
| Technical capability | Advanced cloud services, interoperability, scalability, and AI capability. |
| Operational excellence | Security, resilience, service continuity, and integration into Airbus’s multi-cloud environment. |
| Legal and governance safeguards | European jurisdiction, data protection, and protection against non-European extraterritorial legislation. |
This set of criteria reflects a trade-off rather than a single sovereignty test. A technically capable service may still need to demonstrate appropriate legal protections and operational controls; a service that meets those safeguards also needs to work with the systems and continuity requirements around the workload.
Rank #3
How do the SAP and Mistral announcements fit?
SAP: a separate enterprise-software announcement
On July 24, 2026, SAP announced that Airbus had chosen RISE with SAP alongside a sovereign-cloud operating model for central business processes, including manufacturing, supply chain, finance, and customer service. SAP described a standardized, scalable platform and a phased route to SAP portfolio innovations. This is a separate announcement and should not be treated as another name for, or a disclosed part of, the Scaleway selection.
Mistral AI: deployment options for different uses
Airbus’s May 2026 announcement about Mistral AI described licenses for Mistral’s product suite and options to deploy models on-premises, in trusted clouds, or elsewhere Airbus and its customers consider appropriate. Airbus identified possible uses including technical-document workflows, engineering simulations and support, edge AI for aircraft and spacecraft, and highly secure on-premises defence applications. This is an AI partnership, not evidence about the Scaleway cloud contract.
Together, these announcements illustrate that Airbus has described different arrangements for different enterprise-software and AI needs. They do not establish that the initiatives share a contract, architecture, or set of controls.
What evidence would verify sovereignty for a workload?
A provider announcement can state criteria and intent. An auditor assessing whether a particular workload meets those criteria would need scoped evidence about the workload itself, the service supporting it, and the controls around it. Useful questions include:
- Location and architecture: Where are the workload’s data plane and control plane operated? What data flows to other services, regions, or systems?
- Legal jurisdiction: Which legal entities provide and operate the service? What jurisdiction analysis supports the claimed protections, including against extraterritorial legal demands?
- Privileged access: Who can obtain administrative or support access? Are permissions limited, approved, logged, and independently reviewable?
- Encryption keys: Who controls the keys, how are they protected, and how can access be recovered without undermining the intended control?
- Subcontractors: Which subcontractors can process data or operate relevant infrastructure? How are additions or changes disclosed and assessed?
- Independent assurance: What audits or assessments cover this specific service and scope? What exclusions, dates, and exceptions apply?
- Resilience: What recovery objectives apply, and what test results show that recovery and continuity plans work?
- Exit and portability: Can the workload and its data be moved or exited in a practical way, and what dependencies or costs could impede that?
- Ongoing review: How often are these judgments revisited when ownership, staff, subcontractors, law, or technology changes?
These are verification questions, not claims about Airbus’s internal controls. A complete assessment would tie evidence to a defined workload and service scope rather than relying on a general label such as “sovereign.”
What does the public record establish—and what remains undisclosed?
Airbus has publicly described a sovereignty strategy that varies by workload. Scaleway has announced its selection and described the tender criteria and intended application areas. Airbus has also announced separate enterprise-software and AI initiatives with different scopes.
Best Value
The announcements do not publish a complete workload inventory, workload-by-workload migration status, contract text, technical architecture, data-flow maps, access logs, control-test results, independent audit reports, or relevant subcontractor details. Nor do they set out a public process for revalidating sovereignty as circumstances change. This describes what those public announcements disclose; it does not establish that the evidence does not exist privately.
A September 29, 2026 Rack2Cloud report gives figures of 70 applications initially and 900 in the broader program. Those are secondary-source figures; Scaleway’s announcement does not state them. They should not be treated as confirmed counts without primary-source corroboration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
