Schwarz Digits launches ES³ to set European standard for digital sovereignty
Center stage at the 2026 Hannover Messe (photo: Hannover Messe)
At Hannover Messe 2026 in Germany (April 20-April 24), Schwarz Digits unveiled a new framework designed to bring structure and accountability to one of Europe’s most contested technology debates: digital sovereignty. The European Sovereign Stack Standard (ES³), launched by the IT and digital division of the Schwarz Group, aims to give companies a measurable way to assess how independent—and secure—their cloud and digital infrastructure is.
The announcement comes as European governments, regulators and enterprises reassess their reliance on non-European cloud providers, particularly in light of legal frameworks such as the US CLOUD Act. Against this backdrop, Schwarz Digits positions ES³ as a tool to support procurement, compliance and risk assessment in complex IT environments.
From Lidl parent Schwarz Group to European sovereign cloud provider
Schwarz Digits is part of the Schwarz Group, one of the world’s largest retail companies and the parent of Lidl and Kaufland. Headquartered in Neckarsulm, the privately owned group has built its scale through an integrated model spanning retail, production and logistics.
The digital division consolidates the group’s cloud, cybersecurity and data capabilities, many of which were originally developed to support Lidl’s large-scale European operations. In recent years, these capabilities have been commercialised, with Schwarz Digits targeting enterprise, industrial and public sector customers.
The company emphasises that it operates as a European sovereign cloud provider without a US parent company, which it says limits exposure to foreign access laws such as the US CLOUD Act.
ES³: Turning digital sovereignty into a measurable standard
Digital sovereignty has been widely discussed at policy level but is less clearly defined in operational terms. ES³ is intended to introduce a structured framework that translates sovereignty into measurable criteria for cloud and IT services.
At its core is a “sovereignty maturity model”, which evaluates IT services across four levels—Basic, Initial, Advanced and Future-Proof. The highest level is defined by the company as offering near-complete control over data, infrastructure and dependencies.
According to the company, the absence of common benchmarks has contributed to confusion in the sovereign cloud market. A Schwarz Digits spokesperson told MoveTheNeedle.news that organisations often struggle to assess the difference between verifiable digital sovereignty and marketing claims that do not address underlying dependencies.
The Sovereignty Maturity Level (SML) framework is designed to provide “an objective assessment that fully reveals dependencies and makes IT services objectively comparable,” the company said.
Why digital sovereignty matters now
The launch reflects a shift in how organisations evaluate cloud infrastructure. What was previously driven by cost and scalability is increasingly influenced by legal, regulatory and strategic considerations.
Schwarz Digits cites internal analysis indicating that 82% of companies in the information industry feel dependent on non-European cloud providers due to a lack of alternatives. While the figure is not independently verified in the material provided, it reflects a broader industry concern around vendor concentration and cloud dependency.
The framework also incorporates nine dimensions of sovereignty, including artificial intelligence (AI). According to the company, this ensures that AI systems are assessed within sovereignty requirements from the outset.
Independent verification to counter ‘sovereignty washing’
A central element of ES³ is its external validation. The framework has been audited by BDO AG, which Schwarz Digits presents as a way to move beyond self-declared compliance.
“The audit of the sovereignty maturity model by BDO confirms: The ES³ maturity model provides an independent, practical basis for strengthening digital sovereignty in Europe,” said Parwäz Rafiqpoor, Chairman of the Management Board at BDO, in the press release on the subject.
This approach is intended to improve comparability between cloud providers and reduce ambiguity in procurement processes.
A four-level roadmap for sovereign cloud adoption
For enterprise buyers, ES³ is positioned as both an assessment framework and a procurement tool for sovereign cloud solutions.
The four levels—Basic, Initial, Advanced and Future-Proof—provide a structured way to evaluate IT services. Each level reflects increasing degrees of control over infrastructure, data and dependencies.
The model applies what the company describes as a “minimum principle”: the overall rating is determined by the lowest score across the assessed dimensions. This ensures that weaknesses in one area are not offset by strengths in another.
Assessments are conducted across the full supply chain, reflecting the interconnected nature of modern cloud environments.
STACKIT and the European sovereign cloud ecosystem
ES³ forms part of a broader ecosystem built around STACKIT, the cloud platform operated by Schwarz Digits.
Following an assessment, STACKIT provides recommendations for IT solutions aligned with both technical requirements and sovereignty criteria. These solutions are drawn from a partner ecosystem and classified according to the maturity model.
The approach reflects an effort to build a European sovereign cloud ecosystem within an existing multi-vendor landscape.
Schwarz Digits highlights its use of open-source technologies, including OpenStack and Kubernetes, as a way to reduce dependency and avoid vendor lock-in.
Commercial implications and early traction in regulated sectors
While ES³ is presented as a framework, it also underpins Schwarz Digits’ commercial strategy in the European cloud market.
By positioning digital sovereignty as a measurable procurement factor, the company aims to differentiate itself in a market where compliance and data control are increasingly scrutinised.
Interesting in that regard is that Schwarz Digits recently announced De Nederlandsche Bank (DNB), the Dutch central bank, as a customer. This could underscore a wider demand among EU-based regulated institutions for sovereign cloud infrastructure aligned with European legal and regulatory requirements.
Alignment with EU cloud sovereignty policy
On that note: ES³ is aligned with the European Commission’s Cloud Sovereignty Framework, Schwarz Digits has stated. This alignment is intended to support regulatory compliance and improve adoption across sectors.
The framework is based on a catalogue of more than 100 criteria and is designed to enable comparability across cloud providers and services.
A familiar theme: Europe’s push for digital sovereignty
MoveTheNeedle.news has regularly reported on Europe’s growing efforts to reduce structural dependencies in critical digital infrastructure.
From cloud computing and AI to payments and data infrastructure, control over technology stacks has become a strategic priority. But while demand for European sovereign alternatives is increasing, scaling those alternatives remains a challenge.
ES³ contributes to this debate by focusing on transparency, measurability and comparability within existing cloud ecosystems.
Challenges for ES³ adoption
Schwarz Digits intends to evolve ES³ into a broader European industry standard. Several factors will determine whether this will actually happen.
Adoption remains the primary challenge. For the framework to function as an industry standard, it would need to be accepted beyond Schwarz Digits’ own ecosystem.
Complexity is another factor. Applying detailed sovereignty criteria across multi-layered IT environments may require additional expertise.
ES³ doesn't change the fact that European cloud providers continue to compete with global hyperscalers with significantly larger infrastructure and investment capacity, but it does move the digital sovereignty debate towards measurable, operational criteria: providing a structured approach to a concept that has often remained abstract.
Further reading on MoveTheNeedle.news:
What if Europe’s fragmented deeptech ecosystem is actually an advantage?
Mistral AI acquires Koyeb: building a European AI cloud stack