Many organizations assume their data is secure as long as it’s stored in a Dutch datacenter. But in reality, things are more complex. If the software or infrastructure you use is provided by a U.S.-based company — think of the well-known hyperscalers — that provider can be compelled under the U.S. CLOUD Act to grant access to your data. Even if that data is physically located in the Netherlands.

That feels contradictory — and it is. At XCES, we’re seeing more and more questions about this issue. Not just from public sector or healthcare organizations, but also from commercial companies operating in sensitive industries or across borders. More and more businesses want to stay in control of their data — its location, access, and oversight.

Not a scare story — but a wake-up call

Let’s be clear: we’re not against the public cloud. We work with Microsoft Azure daily and strongly believe in the power of modern cloud technologies. But we do advocate for conscious decisions. That means understanding the legal frameworks you fall under, who has access to your data, and what the implications of your infrastructure choices really are.

Cloud is not a destination. It’s a strategy.

Cloud isn’t some magical end point. It’s not a one-size-fits-all solution. It’s a strategic journey — and you define the path. Sometimes that path leads to the public cloud. Other times, a hybrid model is the right fit. And increasingly, it means investing in a sovereign solution — combining the advantages of cloud innovation with local control. Because the real question isn’t if you’re moving to the cloud.
It’s how, with what, and with whom?

At XCES, we help customers make those choices. By mapping out the landscape, making risks and opportunities visible, and building solutions that are both future-proof and compliant.

Sovereignty starts with control

With technologies like Azure Local, we can build Microsoft environments that run locally — on Dutch infrastructure, under European terms. Thanks to partners like Eurofiber Cloud Infra, we offer a foundation that’s not just technically robust, but also legally and strategically sound.

And that’s exactly what data sovereignty is all about:

• Know where your data resides
• Control who has access
• Comply with the laws and regulations that apply to you geldt
• Work with partners who put your interests first

Taking charge of your digital future

In today’s world, it’s no longer just about speed or scale — it’s about control. Knowing where you stand, where you want to go, and under what terms. At XCES, we build solutions that empower organizations to take that control into their own hands. Want to discuss your cloud strategy and how sovereignty fits into it? We’d love to start that conversation with you.