On the morning of November 18, 2025, EU regulators published their list of critical cloud providers. That afternoon, Cloudflare fell over and demonstrated it. The autumn outage cluster wasn't three stories. It was one.
Exit egress fees died in 2024 and the EU Data Act finishes the job in January 2027. Celebrate briefly. The billing lock died precisely because it was the lock that mattered least, and the four that matter are doing fine.
Since January 2025, EU financial entities must hold documented exit strategies for critical ICT providers, and since November 2025 the providers themselves are under direct supervision. The plan is now a compliance artifact. A real one is still rare.
The proposed Cloud and AI Development Act sorts cloud providers into four sovereignty levels. Tier lists reshape markets faster than mandates do, and startups selling into the EU public sector should read this one now, not at adoption.
In June 2025, Microsoft France's legal director was asked under oath whether he could guarantee French data would never be handed to US authorities. He said no. It wasn't a scandal. It was a clarification, and Brussels heard it.
AWS built a physically separate cloud in Brandenburg with its own IAM, billing, and EU-only operators. It's the most serious sovereignty engineering a hyperscaler has shipped, and the question that matters about it is legal, not technical.
One reference app, four platforms, list prices only. Around $5 a month on Light Cloud, ~$14 on Render, ~$40 on AWS, and the gap widens the moment you add a staging environment. We show the arithmetic, and where the others still have an edge.
Deploying to eu-central-1 makes you compliant with almost nothing. Jurisdiction follows the company that controls your data, not the building that houses it, and a growing amount of sovereignty marketing depends on you confusing the two.
Every pre-seed deck leads with a growth chart, and most of those charts are statistical noise. Here are the numbers we actually watch: time-to-first-deploy, activation, and gross margin per workload type, and why.