Dutch Financial Regulators Propose Joint Cloud Procurement to Counter Tech Concentration

De Nederlandsche Bank (DNB) and Dutch financial authorities have recommended that European financial institutions form collective bargaining groups to negotiate cloud computing and artificial intelligence contracts. According to a Bloomberg report, this initiative aims to mitigate the market dominance of Amazon Web Services (AWS), Microsoft Azure, and Google Cloud, which collectively control over 70% of the European cloud market.

The Case for Aggregated Market Power

European banks currently face significant commercial and legal constraints due to their reliance on a small group of U.S.-based hyperscalers. Individually, most financial institutions lack the leverage to negotiate favorable terms, pricing, or robust exit strategies, often finding themselves locked into standard contracts. By pooling their purchasing power, banks could operate as a single, larger buyer, theoretically gaining the ability to demand better service-level agreements and more flexible data portability options.

Beyond commercial leverage, the proposal addresses the legal implications of the U.S. CLOUD Act. This legislation allows American authorities to compel U.S.-based service providers to disclose data stored on their servers, regardless of the data’s physical location. For European regulators, this creates a sovereignty risk where sensitive financial information of EU citizens could be accessed by foreign judicial processes.

Digital Sovereignty vs. Operational Reality

Despite years of European policy aimed at fostering “strategic autonomy,” the dependence of the financial sector on non-European infrastructure has continued to rise. While local providers like OVHcloud, Hetzner, and Scaleway exist, they currently hold roughly 15% of the market. These providers often lack the expansive global distribution and deep ecosystem of managed services that major banks require for complex, mission-critical operations.

The Dutch regulator is already testing its own advice. De Nederlandsche Bank has begun migrating specific services to Schwarz Digits, the technology division of the Schwarz Group, which operates the Lidl supermarket chain. Additionally, the Netherlands recently exercised its first veto against the acquisition of a cloud provider by a U.S. firm, specifically citing the provider’s role in hosting the national digital identity system.

Challenges to Collective Negotiation

Implementing a unified procurement strategy presents significant logistical and competitive hurdles. Banks operate across different jurisdictions with varying internal requirements, and the incentive to secure a quick, individual discount often outweighs the long-term benefits of collective bargaining.

Furthermore, the “switching cost” remains a primary barrier. Large financial institutions have spent years building infrastructure, training personnel, and developing proprietary software specifically for AWS, Azure, or Google Cloud environments. Migrating these systems to alternative providers is a multi-year process that cannot be resolved through procurement policy alone. For this initiative to succeed, regulators would likely need to provide formal coordination frameworks to help banks overcome the competitive barriers inherent in teaming up with their rivals.

Frequently Asked Questions

• Why do European banks rely so heavily on U.S. cloud providers?
  During the mass digital transformation of the 2010s, AWS, Microsoft, and Google were the only providers capable of meeting the required scale, technical depth, and geographic reach. Once banks migrated their core operations, the cost of moving to a different platform became prohibitively expensive.
• What is the primary risk posed by the U.S. CLOUD Act?
  The act allows U.S. law enforcement to request data from American tech companies even if that data is stored in European data centers. This creates a potential conflict with EU data protection standards and raises concerns regarding jurisdictional control over financial records.
• Are there viable European alternatives available today?
  While providers like OVHcloud, Hetzner, and Scaleway offer services suitable for mid-sized enterprises and specific projects, they do not currently match the global infrastructure, service breadth, or operational ecosystem required by major systemic banks.