Trade body for Amazon, Google and Meta funds study pricing EU cloud act at €115bn
ECIPE says the EU's Cloud and AI Development Act could cost €115bn over a decade, six times the Commission's €18bn upper estimate. CCIA Europe, whose members include Amazon, Google and Meta, funded it. Buyers can test its software re-architecting line against their own estate without accepting the total.
The Board Room · Leadership desk

Three figures from ECIPE. Software re-architecting and code rewriting account for 69% of the Act's real-world impact. Direct public budget exposure is €33.3 billion. Private-sector spill-over costs could amount to as much as €80 billion. ECIPE says the Commission's impact assessment left these out.
| Figure | Value | Note | Claim |
|---|---|---|---|
| Re-architecting and code rewriting, share of impact | 69% | 6 | |
| Public budget exposure | €33.3bn | 5 | |
| Private-sector spill-overs | €80bn up to | 18 |
What happened
- ECIPE attributes the gap to three blind spots in the Commission's impact assessment, the first being €33.3bn in direct public budget exposure.
- It says the assessment ignored software re-architecting and code rewriting, which ECIPE puts at 69% of the Act's real-world impact.
- The third is private-sector spill-overs, which the report puts at as much as €80bn.
- CCIA Europe singles out Article 31, which lets the Commission extend strict sovereignty restrictions beyond public procurement to banking, energy, healthcare and transport.
Why it matters
- exposure Exposure runs through suppliers as well as a buyer's own code: CCIA Europe says European software vendors and digital SMEs would have to redesign applications built on global cloud architectures.
- contradiction CCIA Europe's Mitchell Rutledge says the Commission missed 70% of the Act's impact, but on ECIPE's own totals the €18bn covers about 16% of €115bn, so the implied miss is 84%.
- constraint Buying a sovereign region from a US provider does not settle the question, because the US Cloud Act lets US law enforcement demand data those firms hold even when it is stored outside the US.
The pieces of ECIPE's total do not fit together on the page. The gap between €115bn and €18bn is €97bn [4][14]. The two omissions that carry a stated figure, €33.3bn in direct public budget exposure and up to €80bn in private-sector spill-overs, add up to €113.3bn [5][18][15]. That exceeds the gap. If the 69% share ECIPE assigns to re-architecting applies to the full €115bn, the software line alone is about €79bn [6][16], close to the spill-over ceiling of €80bn. The itpro account does not include ECIPE's method, a Commission response or a date for member-state decisions.
A skeptic would say that a study paid for by a trade body whose members include Amazon, Google and Meta was always going to find a large number [2]. The same body asks that trusted international partners such as its members be exempt from Article 18 country screening [10]. Both points are fair, and they are reason enough to carry €115bn as an advocate's figure. The cost category is a separate question, and a buyer can check it locally. Mitchell Rutledge, CCIA Europe's policy manager [13], said: "Businesses cannot simply switch servers; they must redesign software and rewrite code across entire supply chains." [9] A buyer can count how many of its applications run on global cloud platforms and fall in the sectors Article 31 covers [7].
The cost is conditional on choices not yet made. The Act as proposed excludes non-EU providers from parts of the cloud and AI market [3], and CCIA Europe wants member states to limit sovereignty restrictions to sensitive workloads where specific public-order risks are demonstrated [10]. A buyer in the affected sectors faces a trade-off. Re-architecting now spends engineering time on rules that member states may narrow. Waiting means a later start on the rewrite if they do not. An inventory of exposed applications commits little, and in our view it is the step this quarter supports. Once member states take positions on Article 31, the inventory turns a sector-wide figure into a number for the buyer's own estate.
The market is moving ahead of the rule. AWS's European Sovereign Cloud keeps enterprise data hosted and stored solely in the region, and Microsoft and Google make similar promises [11]. Gartner found in research published earlier this year that one in five European workloads is moving to local clouds, and that spending on sovereign cloud infrastructure in the region is set to triple between 2025 and 2027 [20]. That movement is under way while the Act is still a proposal [1], so a buyer's migration budget is likely to mix the trend's cost with the Act's.
What to watch
- Whether the Commission publishes a response or a revised impact assessment that addresses re-architecting costs and the €33.3bn of public budget exposure.
- Whether member states keep Article 31's reach into private sectors or limit the Act to sensitive workloads, as CCIA Europe asks.
- Whether ECIPE publishes its method, so the 69% re-architecting share and the €80bn spill-over ceiling can be checked.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap+40
- Incentives90
- Confidence70
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
ECIPE issued a report claiming that the EU's proposed sovereignty rules could cost the bloc billions; the report examines the European Commission's proposed Cloud and AI Development Act (CADA).
- [2]
The ECIPE research was funded by CCIA Europe, a trade body with members including Amazon, Google and Meta.
- [3]
CADA, as proposed by the Commission, excludes non-EU providers from parts of the cloud and AI market.
- [4]
The research found the Act risks imposing €115 billion in costs over the next decade, six times the Commission's upper estimate of €18 billion.
- [5]
ECIPE says the Commission's impact assessment failed to include €33.3 billion in direct public budget exposure.
- [6]
ECIPE says the impact assessment ignored the cost of software re-architecting and code-rewriting, which ECIPE said accounts for 69% of CADA's real-world impact.
- [7]
Article 31 of the Act allows the Commission to extend strict sovereignty restrictions beyond public procurement to certain private sectors, including banking, energy, healthcare and transport.
- [8]
CCIA Europe says European software vendors and digital SMEs would be forced to redesign applications currently built on global cloud architectures and AI platforms.
- [9]
Rutledge said: "Businesses cannot simply switch servers; they must redesign software and rewrite code across entire supply chains."
- [10]
CCIA Europe wants member states to limit sovereignty restrictions to sensitive workloads where specific public-order risks are demonstrated, and wants 'trusted international partners' with bilateral EU procurement commitments, like its members, exempted from Article 18 country screening.
- [11]
AWS's European Sovereign Cloud hosts and stores enterprise data solely in the region, separate from other AWS Regions; Microsoft's Sovereign Cloud and Google's sovereign solutions make similar promises.
- [12]
US tech firms are subject to the US Cloud Act, which allows US law enforcement to demand access to the data they hold, even when it is stored outside the US.
- [13]
Mitchell Rutledge is CCIA Europe's policy manager.
- [14]
The gap between ECIPE's €115bn and the Commission's €18bn upper estimate is €97bn.
- [15]
The two quantified omissions, €33.3bn and up to €80bn, add up to €113.3bn, which exceeds the €97bn gap.
- [16]
If the 69% re-architecting share applies to the €115bn total, the software line is about €79bn.
- [17]
Rutledge said: "Taxpayers and businesses will foot the bill, yet the official assessment missed 70% of CADA's true impact."
- [18]
ECIPE says the assessment failed to take into account private-sector spill-over costs, which the report found could amount to as much as €80 billion.
- [19]
On ECIPE's own totals the Commission's €18bn is about 16% of €115bn, so the implied miss is about 84%, against the 70% Rutledge cited.
- [20]
According to Gartner research earlier this year, a fifth of European workloads are shifting to local clouds, with sovereign cloud infrastructure spending in the region set to triple between 2025 and 2027.
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
2 independent publishers whose own reporting we read for this story.
- US tech giants warn Europe that ditching US tech giants could cost €115B (5 minute read)
assets.theregister.com
1 article · October 15, 2026
- itpro.comEU can't afford sovereign cloud, research claims
1 article · October 15, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- EU Cloud and AI Development ActFollow
- Digital sovereigntyFollow
- Tech Lobbying and Political AlignmentFollow
- Cloud ComputingFollow
Entities
- CCIA EuropeFollow
- GoogleFollow
- ECIPEFollow
- MicrosoftFollow
- Amazon Web ServicesFollow
- European CommissionFollow
- US CLOUD ActFollow
- Gartner Inc.Follow
- MetaFollow
- Mitchell RutledgeFollow
- Cloud and AI Development ActFollow