OpenText and S3NS Partner with Google Cloud for European Sovereign Cloud

European organizations are finally getting a concrete way to balance the raw power of global AI with the strict demands of local law. On April 13, 2026, OpenText, the Waterloo-based data management giant, announced a strategic partnership with S3NS and Google Cloud to launch a hybrid sovereign cloud solution based in France. The move is a direct response to the growing tension between the need for hyperscale cloud innovation and the non-negotiable requirements of European data residency.

Here's the thing: for years, European firms have been stuck in a bind. They want the cutting-edge tools provided by US-based tech giants, but they can't risk their most sensitive data leaving the continent or falling under foreign jurisdiction. This new alliance aims to break that deadlock by creating a "trusted cloud" architecture. It allows companies to keep their "crown jewels"—the most sensitive workloads—within a locally governed environment while still tapping into global cloud services for everything else.

The heavy lifting behind this is handled by S3NS, a specialized venture fully owned by the French cybersecurity powerhouse Thales. S3NS isn't just another cloud provider; it's built specifically to meet the SecNumCloud standard, which is essentially the gold standard for security in France. By pairing this level of local certification with OpenText's enterprise software, the partnership creates a sanctuary for data that simply cannot afford a leak or a regulatory breach.

The Blueprint for a Hybrid Sovereign Cloud

The technical core of this partnership revolves around the PREMI3NS platform. This isn't a one-size-fits-all approach. Instead, the partners are deploying a hybrid architecture that splits data based on its sensitivity. For those managing high-stakes information—think patient health records or national security data—the setup offers a Dedicated Private Cloud. This environment will host OpenText Content Management and Documentum Content Management, ensuring that sensitive data never leaves the secure perimeter.

For slightly less critical but still regulated workloads, there is a "Sovereign SaaS" component. This includes OpenText Core Archive for SAP Solutions, delivered as a multi-tenant service. The twist is that while it's a shared service, it maintains strict European data residency. It's a compromise that gives businesses the efficiency of the cloud without the anxiety of where their data is actually physically sitting.

The regulatory framework here is dense. The solution is designed to satisfy not just the General Data Protection Regulation (GDPR), but also the specific SecNum 3.2 requirements. To put this in perspective, this is the same level of rigor used for government-grade cloud environments. OpenText is bringing a lot of baggage here—in a good way—drawing on its experience with FedRAMP in the US and Protected B deployments in Canada to ensure the French environment is airtight.

Why Sovereignty Matters Now

Shannon Bell, Chief Digital Officer and CIO of OpenText, made it clear that this isn't just about software; it's about trust. In a statement released on April 13, Bell noted that organizations across Europe are desperate for innovation that doesn't require them to surrender control. "OpenText is delivering on that need by pairing hyperscaler innovation with an independently governed operating model," Bell explained.

This perspective reflects a broader shift in the tech world. For a long time, the narrative was "move everything to the cloud." But turns out, that didn't work for the most regulated sectors. Banks, hospitals, and government agencies found that the risk of using a standard public cloud was too high. This partnership represents a pivot toward "sovereignty by design," where the governance is baked into the architecture from day one.

Industry insiders see this as a strategic play to fend off the increasing pressure from EU regulators who are wary of the "cloud act" and other US laws that might allow foreign governments to access data. By using S3NS as the local anchor, Google Cloud can effectively "localize" its presence in France, making its technology palatable to the most skeptical of government auditors.

Future Implications for the European Market

What happens next? While the initial rollout focuses on content management and archiving, the partners have already signaled that more solutions will be evaluated for inclusion. The real goal is a "secure AI at scale." AI requires massive amounts of data to train and operate, but if that data is sensitive, it can't be tossed into a generic public cloud. This hybrid model provides the secure pipe needed to run AI workloads without compromising sovereignty.

If this model proves successful in France, it's likely we'll see a ripple effect across the rest of the EU. Other nations with strict data laws—like Germany—could look at this Thales-Google-OpenText triangle as a blueprint for their own sovereign clouds. It shifts the conversation from "Can we use the cloud?" to "How do we use the cloud without losing our autonomy?"

Frequently Asked Questions

What exactly is a "sovereign cloud" in this context?

A sovereign cloud is a cloud computing environment that allows a country or organization to maintain full control over its data, including where it is stored and who can access it. In this partnership, it means using S3NS's French-governed infrastructure so that data remains subject to French and EU laws, rather than being subject to the laws of the country where the cloud provider is headquartered.

How does the SecNumCloud certification affect users?

SecNumCloud is a rigorous security qualification issued by ANSSI in France. For users, this means the platform has passed an extreme level of scrutiny regarding its operational security and technical controls. It provides a guarantee to highly regulated industries—like finance and healthcare—that the cloud environment is safe enough for their most sensitive citizen or patient data.

What is the difference between the Dedicated Private Cloud and Sovereign SaaS?

The Dedicated Private Cloud is a siloed environment for the highest-risk data, utilizing OpenText Content Management and Documentum. In contrast, the Sovereign SaaS (like OpenText Core Archive for SAP) is a multi-tenant service, meaning multiple customers share the infrastructure, but the system still ensures the data physically resides within Europe to meet residency laws.

Why is Google Cloud partnering with a French company like Thales/S3NS?

Google Cloud provides the massive scale and innovative AI tools, but as a US company, it cannot always meet the strict "sovereignty" requirements of French government agencies on its own. By partnering with S3NS (owned by Thales), Google can offer its technology through a locally owned and operated entity that satisfies national security and regulatory standards.