A study by Foundry and easy software AG highlights the priorities of German companies regarding IT security, data ownership, and vendor lock-in.
Essen, September 2, 2026 – Digital sovereignty is one of the key challenges for the future facing companies and public institutions in the DACH region. A joint study by Foundry and easy software AG shows that more than 60 percent of the IT and business decision-makers surveyed in the DACH region rate digital sovereignty as a high to very high priority. This percentage is expected to rise significantly by 2030. However, the path to greater digital sovereignty remains rocky.
What does digital sovereignty specifically mean for companies in the DACH region? The 312 IT and business decision-makers from small and medium-sized enterprises, large companies, and corporate groups associate it primarily with IT security (51 percent), control over their own data (43 percent), and independence from technology providers (25 percent). For many, the topic remains multifaceted: when asked about the most important area, 32 percent cited technical sovereignty, 26 percent operational sovereignty, 23 percent data sovereignty, and 15 percent AI sovereignty.
“Digital sovereignty has many facets. In practice, however, we see that for companies, it ultimately boils down to one central question: How do they ensure their ability to act in complex and increasingly interconnected IT landscapes?” says easy CEO Andreas Zipser. “This isn’t about isolation, but rather about creating transparency, consciously managing dependencies, and being able to make technology decisions autonomously.”
lack of sovereignty becomes a risk
For 45 percent of respondents, cyberattacks and security risks are among the greatest risks posed by a lack of digital sovereignty. 44 percent fear losing control over their own data. Another 39 percent view vendor lock-ins as a major challenge. Regulatory and legal uncertainties follow at 28 percent. Limited innovation capacity, cost increases imposed by providers, and productivity losses also cause companies headaches.
Concerns are particularly high regarding the use of non-EU cloud providers. 57 percent cite the possibility of unauthorized data access by foreign authorities as a particularly relevant scenario. Just under 49 percent are concerned about limited or lacking data portability. At the same time, the study reveals clear limits to companies’ willingness to switch: 47 percent would choose a sovereign European solution only if prices were comparable.
“The results show that companies weigh digital sovereignty very pragmatically,” says Andreas Zipser. “Greater control and independence are important. At the same time, solutions must remain functional, cost-effective, and practical to implement. That is precisely where the real challenge lies: finding the right balance between control, efficiency, and the ability to innovate.”
a look into the future
Over the next two to three years, companies will primarily rely on sovereign cloud solutions (34 percent) to strengthen their digital sovereignty. This is followed by investments in their own IT infrastructure (31 percent) and multicloud strategies (30 percent). Other key priorities include building their own data platforms (26 percent) and implementing a clear data strategy (23 percent).
However, implementation remains challenging. The complexity of existing IT systems is the biggest obstacle to greater sovereignty (38 percent). Respondents cite budget constraints and high migration costs almost as frequently (38 percent). Added to this is a limited market offering: 31 percent of companies see too few providers with an adequate technology stack, while 25 percent lack equivalent technological alternatives.
With this study, easy software AG establishes a robust data foundation for the discussion on digital sovereignty. Cloud computing, regulatory requirements, and artificial intelligence present companies with new questions regarding control, dependencies, and data sovereignty. The goal is to support companies and public institutions in assessing current developments and implementing viable strategies for digital sovereignty.
The full study, “Digital Sovereignty as a Strategic Priority,” is now available for download here in German language as of yet.
