SecNumCloud: Data Sovereignty, a Barrier to Modernization?
summary
SecNumCloud is a French cloud security certification imposing 700+ auditable requirements, EU-only data storage/operation, ownership limits and prohibition of third‑party technical access to prevent extraterritorial orders. Four providers are currently qualified; one reported a 3.5‑year, ~€7M effort to qualify. Teams are implementing OpenAPI-compatible APIs, a Terraform provider on GitHub, and planning an OpenShift PaaS to show that Infrastructure-as-Code and CI/CD can work under SecNumCloud, though certified PaaS/SaaS offerings remain rare.
AI-written summary · about
chapters (12)
- 0:00Data sovereignty intro
- 1:03EU-US data protection
- 5:06Sovereign cloud emergence
- 7:39SecNumCloud overview
- 13:04SecNumCloud requirements
- 16:44Modernization vs security
- 18:35SecNumCloud demo
- 22:29App modernization limits
- 27:18SecNumCloud limits
- 30:11Hybrid cloud balance
- 31:36Public cloud protection
- 33:12Q&A
related talks
49mCloud Security Made for the EU: Securing Data & Applications
40mSovereignty Spotlight: EU Regulations and the...
31mEU Cloud Sovereignty Framework Explained
08h 05mThe European Sovereign Cloud Day
38mState of Cloud Sovereignty: From Public Clouds to Confidential Clouds
02mHighlights
44mState of Cloud Sovereignty: From Public Clouds to…
52mHow Sovereign Solution Providers are Securing Europe’s Digital Borders?
