European Tech Sovereignty: Where the EU Stands in 2025

€43 billion. That is the headline figure attached to the European Chips Act, the European Union's most visible bet on technological self-determination. Yet funding alone does not explain whether Europe is winning or losing the race for digital sovereignty. Three years after Russia's invasion of Ukraine shattered assumptions about interdependence, and amid an escalating US-China technology war, the EU finds itself at a crossroads: it has passed landmark legislation, deployed historic public investment, and articulated a coherent strategic vision — yet remains structurally dependent on foreign platforms, semiconductors, and AI infrastructure. This article maps the current state of European tech sovereignty across five critical dimensions, drawing on the latest data and concrete developments.

The Strategic Logic: Why Sovereignty Became an Imperative

!Infrastructure numérique de l'Union européenne — centres de données et connectivité Photo: Dmitrii E. / Unsplash

For most of the 2000s and 2010s, European policymakers treated technological interdependence as a feature, not a bug. Comparative advantage, global supply chains, and transatlantic trust made it rational to outsource semiconductor fabrication to TSMC, cloud computing to AWS and Azure, and search to Google. The year 2020 shattered that logic.

COVID-19 exposed the fragility of Asian semiconductor supply chains, leaving European automakers — Volkswagen, Stellantis, Renault — scrambling when chip shortages cost the continent an estimated €100 billion in lost automotive production in 2021 alone (European Automobile Manufacturers' Association, 2022). The subsequent US CHIPS and Science Act, signed in August 2022, made clear that Washington would subsidize its own semiconductor ecosystem regardless of WTO rules or alliance politics. China's ambitions in AI and quantum computing added a third vector of pressure.

The EU's response was swift by Brussels standards. Between 2022 and 2024, European institutions passed or enacted:

• The European Chips Act (February 2023): €43 billion to double Europe's global chip market share to 20% by 2030
• The AI Act (August 2024): the world's first comprehensive AI regulatory framework
• The Data Governance Act (2022) and Data Act (2024): rules for data sharing and portability
• The Digital Markets Act (2022): structural obligations on "gatekeeper" platforms
• The NIS2 Directive (2023): upgraded cybersecurity requirements across critical infrastructure

This legislative blitz represents the most ambitious attempt at digital industrial policy in European history. But legislation is not infrastructure, and rules are not capabilities.

Semiconductors: Progress Real, Gap Enormous

Europe currently manufactures roughly 8-9% of global semiconductor output by value, down from approximately 25% in the 1990s (SEMI Europe, 2024). The EU's stated goal of reaching 20% by 2030 would require a near-tripling of capacity — an extraordinarily ambitious target given that a leading-edge fab takes 4-5 years to build and costs $20 billion or more.

The flagship project is the Intel fab in Magdeburg, Germany, backed by €10 billion in German state subsidies and €8.5 billion from the EU. However, in September 2023, Intel announced a two-year delay to the project, citing deteriorating market conditions and a need to recalibrate global investment. By late 2024, the project remained in limbo — a sobering early data point for the Chips Act's ambitions.

More tangible progress is visible elsewhere:

• TSMC's Dresden plant, a joint venture with Infineon, NXP, and Bosch, broke ground in August 2024 with a €10 billion investment. This facility will produce 28nm and 22nm chips — mature nodes critical for automotive and industrial applications.
• STMicroelectronics and GlobalFoundries are expanding their existing joint facility in Crolles, France, targeting 18nm FD-SOI technology with €7.5 billion in investment, partly subsidized by the French state.
• ASML in the Netherlands remains the world's sole producer of extreme ultraviolet (EUV) lithography machines — Europe's single most strategically irreplaceable asset in global chip supply chains.

The ASML advantage is genuinely extraordinary: without its machines, no one on earth can manufacture leading-edge chips below 5nm. The company generated €27.6 billion in revenue in 2023, with a backlog exceeding €38 billion. Yet ASML itself depends on US-controlled software for machine operation, and Washington has pressured the Netherlands to restrict exports to China — demonstrating that even Europe's crown jewel is not fully sovereign.

Strategic assessment: Europe is making meaningful progress in automotive-grade and industrial semiconductors, but remains a decade or more behind the frontier in logic chips. The 20% market share target by 2030 is widely regarded by industry analysts as aspirational rather than operational.

Cloud and Data Infrastructure: The Dependency That Persists

If semiconductors represent Europe's most publicized sovereignty challenge, cloud infrastructure may be its most structurally entrenched. As of Q1 2025, Amazon Web Services, Microsoft Azure, and Google Cloud collectively hold approximately 70% of the European cloud market (Synergy Research Group, 2025). The three US hyperscalers have each invested billions in European data centers — AWS alone announced €7.8 billion in German cloud infrastructure in 2024 — but this investment deepens rather than reduces European dependency.

The EU has attempted to counter this through Gaia-X, a Franco-German initiative launched in 2020 to create a federated European cloud standard. The project has attracted over 300 member organizations, but its practical impact has been limited. Critics note that many Gaia-X members are the very US hyperscalers it was designed to counterbalance, and the initiative has produced standards documents more than sovereign infrastructure.

More credible European cloud players include:

• OVHcloud (France): Europe's largest cloud provider by server count, with €988 million in revenue in FY2024, and expanding data center presence across 40 countries
• Hetzner (Germany): a fast-growing value-cloud provider popular with European startups and SMEs
• Deutsche Telekom's Open Telekom Cloud and Orange Business: telco-backed offerings with significant enterprise penetration
• Scaleway (Iliad Group, France): positioning aggressively on sustainability and European compliance credentials

None of these players approaches the scale, service breadth, or developer ecosystem of the US hyperscalers. The gap is not merely financial — it is compounded by talent, tooling, and network effects.

The EUCS (EU Cloud Certification Scheme), currently being finalized by ENISA, will establish security requirements for cloud providers handling sensitive EU data. A contentious debate over whether US-owned providers with European subsidiaries can qualify has delayed finalization. The outcome will significantly shape market dynamics: a strict sovereignty requirement would effectively lock US hyperscalers out of sensitive public-sector contracts.

Artificial Intelligence: From Regulation to Race

The EU's AI Act, which entered into force in August 2024 with phased implementation through 2027, is simultaneously Europe's greatest regulatory achievement and a source of deep strategic anxiety. The regulation establishes a risk-based framework — banning certain AI uses (social scoring, most real-time biometric surveillance), imposing strict requirements on high-risk applications (hiring, credit, border control, medical devices), and light-touch rules for general-purpose AI above a 10^25 FLOP training threshold.

The strategic concern is straightforward: while Europe legislates, the US and China build. As of early 2025:

• US AI investment reached approximately $67 billion in 2024 (PitchBook, 2025), dwarfing European figures
• The EU accounted for roughly €3.4 billion in AI venture investment in 2024 (Dealroom, 2025) — significant growth but structurally smaller
• Mistral AI (France) remains Europe's most prominent large model developer, raising $1.08 billion at a $6 billion valuation in June 2024 and launching models competitive with mid-tier US offerings
• Aleph Alpha (Germany) raised €500 million in 2024, positioning as a sovereign AI provider for European government clients

The EU has committed €1 billion per year through Horizon Europe to AI research, and the newly established AI Factories program — announced at the Paris AI Summit in February 2025 — will provide sovereign supercomputing access to European AI developers through a network of high-performance computing facilities.

Critically, the European AI Office, established in February 2024 within the European Commission, has begun developing evaluation methodologies and codes of practice for general-purpose AI models. This creates a de facto global compliance standard: any model deployed in Europe by a company of sufficient scale must comply, regardless of origin. Like GDPR before it, the AI Act may prove to be a significant exercise of European regulatory power even if European AI companies do not dominate global markets.

Connectivity and Quantum: The Infrastructure Frontier

Two emerging technology areas illustrate the range of European sovereignty positions — one promising, one fragile.

Quantum computing represents a genuine European strength. The EU's Quantum Flagship program, with €1 billion in funding over 10 years, has supported the development of competitive quantum processors. IQM Quantum Computers (Finland) and Pasqal (France) are among the globally leading quantum hardware developers. Germany's DLR and France's CEA operate national quantum programs of significant scale. The EU has also launched the EuroQCI (European Quantum Communication Infrastructure) initiative to deploy quantum-secured communication networks across all 27 member states by 2027 — a concrete sovereignty infrastructure play.

Space connectivity presents a more complex picture. The EU's Galileo satellite navigation system is now fully operational with 28 satellites, providing positioning services independent of US GPS — a genuine sovereignty success story a decade in the making. However, the EU's response to Starlink's growing dominance in broadband satellite connectivity is still taking shape. The IRIS² constellation (Infrastructure for Resilience, Interconnectivity and Security by Satellite) was formally awarded to a SpaceRISE consortium in December 2023, with 290 planned satellites for government and commercial broadband by 2030. Critics note the timeline is ambitious and the industrial consortium untested at this scale.

Cybersecurity represents perhaps the most coherent European sovereignty effort. The NIS2 Directive, applicable from October 2023, extends mandatory cybersecurity requirements to approximately 160,000 European entities across 18 sectors, compared to roughly 2,000 under the original NIS Directive. Combined with the Cyber Resilience Act (passed 2024), which mandates security-by-design for all connected products sold in the EU, Europe is building a regulatory sovereignty floor in cyber that no competitor jurisdiction has matched.

Strategic Implications: What European Actors Must Understand

For business and government strategists operating in or with Europe, five implications stand out:

1. Regulatory asymmetry is a competitive tool. The AI Act, DMA, GDPR, and Cyber Resilience Act collectively create compliance costs that disproportionately disadvantage smaller non-European entrants and create structural moats for locally compliant players. European tech companies that build compliance into their product architecture from day one are increasingly competitive in regulated procurement.

1. Sovereign procurement is real and growing. European governments — particularly Germany, France, and the Netherlands — are actively developing preferred-vendor frameworks that favor European cloud, AI, and telecom providers for sensitive data. OVHcloud, Atos/Eviden, and Thales have all secured significant contracts on sovereignty grounds.

1. The chip ecosystem is automotive-first. The most realistic near-term benefit of European semiconductor investment is in automotive and industrial chips (28nm-65nm range), not leading-edge logic. Automotive OEMs and Tier-1 suppliers will have more supply chain optionality within 5 years; hyperscaler-grade compute will remain US or Asian sourced.

1. AI compliance will become a market access requirement. By 2026-2027, any AI system deployed in high-risk applications in Europe will require conformity assessments, technical documentation, and registration. This creates demand for European AI auditing, testing, and certification services — a nascent but significant market.

1. Fragmentation risk is real. Europe's 27 national markets, multiple languages, fragmented capital markets, and divergent government procurement rules remain structural handicaps. The EU's ability to create a genuine digital single market — where a startup can scale from Tallinn to Lisbon without regulatory fragmentation — remains the deepest unsolved sovereignty problem.

European tech sovereignty is neither a fait accompli nor an illusion. It is a work in progress, unevenly advanced across sectors, generously funded but facing structural headwinds. The decisions made in Brussels, Berlin, and Paris over the next 24 months — on EUCS, on AI Factories, on chip fab commitments — will determine whether the legislative architecture of 2022-2024 translates into genuine strategic capability or remains an ambitious paper exercise.

— InekIA Editorial Team