When Microsoft cut off the ICC prosecutor's email, it proved what sovereignty advocates had warned about for years. Now Europe is scrambling to respond—but does it have the skills to go it alone?

The Day the Kill Switch Became Real

On February 6, 2025, President Trump signed Executive Order 14203, imposing sanctions on the International Criminal Court in response to arrest warrants issued against Israeli Prime Minister Benjamin Netanyahu. The order authorised asset freezes and entry bans on ICC officials and anyone supporting the court's work.¹

What happened next should alarm every organisation running critical infrastructure on American platforms.

The ICC's Chief Prosecutor, Karim Khan—a British national working at an international court in The Hague—found himself locked out of his Microsoft email account, cutting off access to critical case files and communications.² His UK bank accounts were frozen. All 900 ICC staff members were banned from entering the United States.³

Microsoft's response was telling. The company initially denied suspending services, claiming the ICC had moved Khan's email to Proton Mail voluntarily.⁴ But the damage was done. As one analysis put it: "The disconnection of prosecutor Khan is a mouse-click heard around the world."⁵

This wasn't a technical failure. It was a demonstration of extraterritorial reach—proof that a policy decision in Washington can instantly disable access to systems that international institutions depend on daily.

The sanctions have since expanded. By December 2025, the Trump administration had sanctioned six ICC judges, two deputy prosecutors, and the UN Special Rapporteur on Palestine.⁶ The measures block their access to basic financial services and everyday activities like online shopping and email.⁷

For the French government, watching this unfold while their citizens' health data sat on Microsoft Azure, the implications were immediate.

The European Response: From Alarm to Action

The ICC incident catalysed what years of policy papers and working groups had failed to achieve: concrete action.

The Netherlands: Ground Zero

The Dutch government was particularly alarmed. Microsoft's controversial move prompted authorities to start reassessing official digital infrastructure and exploring alternatives to U.S. technology providers.⁸

Demand for domestic cloud providers surged. Ludo Baauw, founder of Rotterdam-based Intermax Group, reported that at least 10 key public institutions contacted his company in the weeks following the incident.⁸

The issue reached the Dutch parliament, where proposals now aim to ensure that at least 30% of government systems rely on Dutch or European cloud solutions.⁹

Germany: Leading the Exodus

Germany has made perhaps the most decisive moves. The state of Schleswig-Holstein has replaced most of its Microsoft-powered computer systems with open-source alternatives, cancelling nearly 70% of its licenses. Its target is to use big tech services only in exceptional cases by the end of the decade.¹⁰

The German state completed the migration of 40,000 employee email accounts from Microsoft Exchange Server and Outlook to Open-Xchange and Mozilla Thunderbird. It previously switched from Windows to Linux on desktops, and Microsoft Office to LibreOffice.¹¹

According to the latest Bitkom Study 2025, Germany faces a shortage of around 109,000 IT specialists—a figure that makes this migration even more remarkable.¹²

Denmark: Following Suit

Denmark announced in June 2025 that it would begin migrating government systems from Microsoft to open-source solutions, a step already taken by several Danish municipalities.⁹

The country's Ministry of Digitalization has begun to phase out Office 365 in favor of LibreOffice, following similar moves by the municipalities of Copenhagen and Aarhus.¹¹

France: Building Sovereign Infrastructure

France's Ministry of Economics and Finance recently completed NUBO, an OpenStack-based private cloud initiative designed to handle sensitive data and services.¹³

France is already removing Zoom, Teams, and other US videoconferencing platforms from government use in favor of local services.¹⁴

The French Health Data Hub—the catalyst for this article—has launched a €6.2 million tender for sovereign hosting, with deployment expected in early 2026. OVHcloud and Cloud Temple have positioned themselves for the contract.¹⁵

The ICC's Own Response

The International Criminal Court announced in November 2025 it was replacing its Microsoft office software with OpenDesk, an open-source office and collaboration suite delivered by the German Centre for Digital Sovereignty (ZenDiS).¹³

In July 2025, Germany, France, Italy, and the Netherlands established the European Digital Infrastructure Consortium for Digital Commons to jointly develop and scale sovereign digital tools like OpenDesk.¹³

The Scale of European Dependency

The urgency of these moves becomes clear when you examine the depth of European dependency on American infrastructure.

A European Parliament report estimates that the EU relies on non-EU countries for over 80% of digital products, services, infrastructure, and intellectual property.¹⁶

Amazon Web Services, Microsoft Azure, and Google Cloud hold approximately 70% of the European cloud market, while the continent's largest provider accounts for a mere 2 percent.¹⁷

A recent Gartner survey of 214 Western European CIOs and IT leaders showed that 61% intend to shift more workloads to local or regional providers in response to geopolitical concerns. At the same time, 53% plan to restrict use of global hyperscalers, and 44% said they've already started.¹¹

The concern is well-founded. In a French Senate hearing, Microsoft France president Anton Carniaux said the company could not guarantee that customer data would never be transferred to US authorities under the CLOUD Act.¹¹

As one commentator framed it: "Imagine if Americans woke up one morning to discover that 90 percent of their digital infrastructure was owned by Europeans. Would they regulate? Or would they march to the White House and demand action: 'Let's build'?"¹³

Ireland: The Paradox at Europe's Edge

Ireland presents a unique case study in the tensions of digital sovereignty.

In November 2025, Minister of State Niamh Smyth signed the Declaration for European Digital Sovereignty on behalf of Ireland at a ministerial summit in Berlin, joining fellow EU Member States in a commitment to strengthen Europe's ability to act independently in the digital sphere.¹⁸

"We must pursue digital sovereignty in an open manner," Minister Smyth said. "A collaborative approach makes the EU stronger in the long run."¹⁸

Yet Ireland may be the most exposed EU country to US tech dependency. The country hosts the European headquarters of virtually every major US tech company. AWS is planning data centers requiring up to 800 MW of power—equivalent to the annual consumption of 2.2 million Irish homes.¹⁹

The contradiction runs deep. As academic Patrick Brodie argues, Ireland "hitched its wagon to the transatlantic investment relationship" in the post-war period, shaping the country's industrial landscape ever since. "You can't have a green transition that's genuinely independent if it's dictated by the needs of monopolistic tech companies."¹⁹

Irish organisations themselves recognise the risk. According to Accenture's research, 72% of Irish organizations are seeking sovereign solutions in response to current geopolitical uncertainty—higher than the European average of 62%.²⁰

The Irish case shows what happens when digital expansion outruns planning, and when political dependency on a small group of firms overrides other commitments.¹⁹

The Skills Gap: Europe's Sovereignty Crisis Within a Crisis

Here is where the sovereignty ambition collides with a hard reality: Europe may not have the skills to run its own infrastructure.

Two Decades of Abstraction

Cloud computing promised to abstract away infrastructure so developers could focus on business logic. And it delivered. You don't need to think about servers anymore. Or networking. Or disk I/O. Or memory management. Just write your code, deploy to AWS Lambda, and it works.²¹

Except when it doesn't. And when it doesn't, good luck figuring out why.

As one observer noted: "We've successfully hidden all the complexity of computing infrastructure. Which was the whole point of cloud computing. But we also accidentally hid all the learning opportunities."²²

The global public cloud services market is projected to reach over $805 billion in 2024, growing at nearly 20% annually. More companies are going cloud native, serverless, everything as a service.²¹

But this abstraction has created a generation of developers who have never configured a server, never debugged a network issue, never managed storage at scale.

The Numbers Are Stark

The European public cloud market faces a critical shortage of professionals skilled in secure cloud architecture, identity management, and compliance automation, which impedes adoption and increases operational risk.²³

National initiatives like Germany's Cloud Skills Initiative and France's Cloud Academy aim to close this gap but operate at insufficient scale. Consequently, organisations rely on managed service partners, increasing dependency and reducing control.²³

The EU needs nearly 10 million more tech workers by 2030 to meet its Digital Decade targets. Universities haven't caught up—many CS programs still focus on theoretical foundations, meaning fewer graduates can deploy Kubernetes clusters, architect zero-trust security frameworks, or manage infrastructure at scale.²⁴

Skills in Demand vs. European Shortfall

The Open Source Imperative

If Europe is to achieve genuine sovereignty, open source skills become non-negotiable.

The Linux operating system powers 90% of public cloud workloads and 100% of the world's TOP500 supercomputers.²⁵

Yet 93% of employers report difficulty finding qualified open-source talent in 2025. This persistent talent shortage has existed for several years and shows no signs of improvement.²⁵

61% of hiring managers actively seek candidates with Linux skills, while 69% prioritize cloud and container technology expertise.²⁵

72% of organizations prioritize upskilling existing staff in 2025, representing a significant increase from 48% in 2024—a 50% year-over-year increase reflecting a strategic shift in how companies address talent shortages.²⁵

The Debugging Crisis

The abstraction problem manifests most acutely when things break.

Debugging in serverless environments is challenging due to the stateless, ephemeral, and dynamically scaling nature of functions. There's no fixed infrastructure for traditional methods like SSH, as functions are short-lived and scale dynamically.²⁶

Industry experts have noted that developers working with serverless platforms often cannot debug their code or run it on their machines. They show comically large system diagrams for simple use cases, then spend hours explaining not-quite-ACID transactions.²⁷

All those skills developed on proprietary platforms are tied to Amazon or some other giant. All the code written is at their mercy. Any problem depends on their support.²⁷

The AI Trap: Don't Swap One Dependency for Another

There's a dangerous assumption embedded in some sovereignty discussions: that AI can paper over the skills gap. That we can replace human infrastructure expertise with machine intelligence.

This thinking contains a fundamental contradiction.

AI Sovereignty Requires Infrastructure Sovereignty

The same layers that offer the most economic and productivity value also carry the greatest sovereignty risk. Applications, models, and tools are where the most sensitive information resides—industrial intellectual property, health data, public records—making them especially vulnerable to dependency on non-European providers.²⁸

AI shifts the focus. Digital sovereignty is no longer only about where your data resides. It is also about who controls the models, the training and fine-tuning pipeline, the inference environment, and the standards that govern AI behaviour.²⁹

If your stack includes foundation models from OpenAI, Google DeepMind, Anthropic, or Meta AI, you should treat model dependency like any other critical supplier dependency.²⁹

The OpenAI Precedent

Consider what happened when OpenAI shut down a service that European companies depended on:

"OpenAI shut it down within months. Not due to technical failure, but cost considerations. One board meeting in San Francisco eliminated companies across multiple continents. This represents dependency at its most dangerous: external corporate decisions can instantly destroy businesses that took years to build."³⁰

European AI Initiatives

European countries are building sovereign AI systems. Spain launched Alia, the first European open multilingual infrastructure. Switzerland released Apertus. Poland launched PLLuM. The Netherlands is developing GPT-NL.³¹

But 65% of European organisations admit they cannot remain competitive without non-European technology providers.³²

The market understands this. Sixty percent of European organizations plan to increase investment in sovereign AI technology in the next two years, particularly those in Germany (73%), Italy (71%), and Switzerland (64%).²⁰

But sovereign AI requires sovereign infrastructure, which requires sovereign skills. There are no shortcuts.

The Path Forward: Sovereignty Starts at the Terminal

We've argued before that sovereignty starts at the terminal—at the command line, in the fundamentals of how systems actually work.³³

The research bears this out. The path to digital sovereignty is not a single grand gesture but a series of deliberate, often difficult choices.¹³

What Organisations Must Do

1. Audit your dependencies ruthlessly.

   Understand which systems are subject to US jurisdiction. Microsoft, Google, and Amazon cannot exempt themselves from extraterritorial laws, regardless of where data is stored.³⁴ Sixty-seven percent of German companies say they cannot operate without US hyperscalers.³⁵

2. Invest in fundamental skills, not just certifications.

   The cloud skills shortage isn't just about AWS certifications. It's about understanding what those abstractions hide: networking, storage, security, Linux system administration.

   90% of employers express willingness to pay for employee certifications—but certifications without foundational knowledge create brittle expertise.²⁵

3. Embrace open source as strategic infrastructure.

   Open source software prevents dependencies on individual providers and allows independent security audits.³⁶ It's not just about cost—it's about control.

   Across France, Germany, the Netherlands, and Italy, governments are investing both nationally and transnationally in digital open-source platforms and tools for chat, video, and document management—akin to digital Lego bricks that administrations can host on their own terms.¹⁰

4. Plan for hybrid, not total replacement.

   A complete break from US hyperscalers may seem unrealistic, as Forrester predicts. But targeted migrations for specific, high-risk applications are not only possible but are actively being pursued.¹³

   For certain workloads—especially national security, industrial IP, or high-profile consumer data—EU-native cloud is no longer a nice-to-have but a business continuity requirement.¹⁴

5. Treat AI dependency like any other critical supplier dependency.

   If you're building on OpenAI's APIs, you're one board meeting away from service disruption. Build optionality. Support European alternatives. Demand open standards.

How We Help

At uRadical, we specialise in the infrastructure fundamentals that sovereign cloud migrations demand—Linux, networking, storage, security, and the systems expertise that two decades of cloud abstraction have made scarce.

Our team brings experience scaling production systems at companies like MyWelcomebook and SafeOps365, and we lead the Belfast Gophers, the largest Go user group in Ireland and third largest in the UK. We understand what it takes to build and operate resilient infrastructure without depending on hyperscaler abstractions.

We help organisations:

• Assess infrastructure dependencies — Map your exposure to US jurisdiction and identify high-risk workloads that require sovereign alternatives.
• Upskill teams on open-source alternatives — Practical training on Linux, Kubernetes, OpenStack, and the tools that underpin genuine sovereignty.
• Architect migration paths — Design hybrid strategies that reduce reliance on US hyperscalers without sacrificing capability or requiring a wholesale rip-and-replace.
• Build internal capability — Transfer knowledge so your team can operate independently, not just swap one vendor dependency for another.

The skills gap is real, but it's not insurmountable. The question is whether you invest now or scramble later.

The Clock is Ticking

The European Commission's State of the Digital Decade report of June 2025 explicitly stated the goal of digital autonomy.⁹

But autonomy requires capability. Capability requires skills. And skills require investment—not in abstraction layers that hide complexity, but in fundamental knowledge that enables independence.

Europe has world-class research institutions, leading industrial players, deep pools of private capital, and a public sector that understands the link between innovation, competitiveness, and sovereignty. What is missing is not capability, but coordination and conviction.²⁸

The kill switch is real. We've seen it deployed against an international court. The question is not whether it could be used against European institutions, companies, or citizens. The question is whether Europe will be ready when it is.

Sovereignty starts at the terminal. It's time to start building.

References

1. Human Rights Watch, "US: Trump Authorizes International Criminal Court Sanctions," February 7, 2025. https://www.hrw.org/news/2025/02/07/us-trump-authorizes-international-criminal-court-sanctions
2. Just Security, "Raising the Cost of U.S. Coercion Against the ICC," September 4, 2025. https://www.justsecurity.org/119583/raising-cost-us-coercion-icc/
3. PBS News, "Trump's sanctions on ICC's chief prosecutor have halted tribunal's work, officials and lawyers say," May 15, 2025. https://www.pbs.org/newshour/world/trumps-sanctions-on-iccs-chief-prosecutor-have-halted-tribunals-work-officials-and-lawyers-say
4. Digital Watch Observatory, "Microsoft allegedly blocked the email of the Chief Prosecutor of the International Criminal Court," May 25, 2025. https://dig.watch/updates/microsoft-allegedly-blocked-the-email-of-the-chief-prosecutor-of-the-international-criminal-court
5. Computer Weekly, "Microsoft's ICC email block reignites European data sovereignty concerns," 2025. https://www.computerweekly.com/opinion/Microsofts-ICC-email-block-reignites-European-data-sovereignty-concerns
6. Human Rights Watch, "International Criminal Court: Justice at Risk," December 1, 2025. https://www.hrw.org/news/2025/12/01/international-criminal-court-justice-at-risk
7. Al Jazeera, "ICC judges stoic in face of US sanctions over Israeli war crimes cases," December 12, 2025. https://www.aljazeera.com/news/2025/12/12/icc-judges-stoic-in-face-of-us-sanctions-over-israeli-war-crimes-cases
8. Xinhua, "Microsoft email block of ICC prosecutor fuels Dutch alarm over U.S. tech dependence," May 21, 2025. https://english.news.cn/20250521/4a278fdce8324af59346ecf47ac407c9/c.html
9. European Union Institute for Security Studies, "Technical is political: When a cloud certification scheme divides Europe," November 3, 2025. https://www.iss.europa.eu/publications/briefs/technical-political-when-cloud-certification-scheme-divides-europe
10. The Conversation, "Europe wants to end its dangerous reliance on US internet technology," January 2026. https://theconversation.com/europe-wants-to-end-its-dangerous-reliance-on-us-internet-technology-274042
11. Computerworld, "Global uncertainty is reshaping cloud strategies in Europe," December 22, 2025. https://www.computerworld.com/article/4109029/global-uncertainty-is-reshaping-cloud-strategies-in-europe.html
12. Euro Security, "The IT job market in 2025: statistics show improvement, but reality remains challenging," 2025. https://euro-security.de/en/the-it-job-market-in-2025-statistics-show-improvement-but-reality-remains-challenging/
13. The Register, "Europe gets serious about cutting US digital umbilical cord," December 22, 2025. https://www.theregister.com/2025/12/22/europe_gets_serious_about_cutting/
14. The Register, "Euro firms must ditch Uncle Sam's clouds and go EU-native," January 30, 2026. https://www.theregister.com/2026/01/30/euro_firms_must_ditch_us
15. L'Usine Digitale, "Le Health Data Hub met 6,2 millions d'euros sur la table pour reprendre la main sur les données de santé," July 4, 2025. https://www.usine-digitale.fr/article/le-health-data-hub-met-6-2-millions-d-euros-sur-la-table-pour-reprendre-la-main-sur-les-donnees-de-sante.N2234548
16. Atlantic Council, "Digital sovereignty: Europe's declaration of independence?" January 2026. https://www.atlanticcouncil.org/in-depth-research-reports/report/digital-sovereignty-europes-declaration-of-independence/
17. Carnegie Endowment for International Peace, "The EU's AI Power Play: Between Deregulation and Innovation," May 20, 2025. https://carnegieendowment.org/research/2025/05/the-eus-ai-power-play-between-deregulation-and-innovation
18. Department of Enterprise, Trade and Employment (Ireland), "Ireland signs Declaration for European Digital Sovereignty," November 18, 2025. https://enterprise.gov.ie/en/news-and-events/department-news/2025/november/20251118.html
19. TechPolicy.Press, "What Ireland's Data Center Crisis Means for the EU's AI Sovereignty Plans," December 18, 2025. https://www.techpolicy.press/what-irelands-data-center-crisis-means-for-the-eus-ai-sovereignty-plans/
20. Accenture, "Europe Seeking Greater AI Sovereignty," November 3, 2025. https://newsroom.accenture.com/news/2025/europe-seeking-greater-ai-sovereignty-accenture-report-finds
21. IDC, "Worldwide Spending on Public Cloud Services is Forecast to Double Between 2024 and 2028," July 29, 2024. https://my.idc.com/getdoc.jsp?containerId=prUS52460024
22. Devsu, "Serverless Architecture in 2025: Is It Time to Go Completely Serverless," 2025. https://devsu.com/blog/serverless-architecture-in-2025-is-it-time-to-go-completely-serverless
23. Market Data Forecast, "Europe Public Cloud Market Size, Share and Analysis, 2033," December 2025. https://www.marketdataforecast.com/market-reports/europe-public-cloud-market
24. Index.dev, "Europe's Tech Job Market: Statistics and Trends for 2026," 2025. https://www.index.dev/blog/europe-tech-job-market-trends-statistics
25. Command Linux, "Linux IT Job Market Demand Statistics," January 2026. https://commandlinux.com/statistics/linux-it-job-market-demand-statistics/
26. Splunk, "Serverless Architecture & Computing: Pros, Cons, Best Fits, and Solving Challenges." https://www.splunk.com/en_us/blog/learn/serverless-architecture.html
27. BuzzClan, "Serverless Computing in 2025: Complete Guide & Best Practices," August 21, 2025. https://buzzclan.com/cloud/serverless-computing/
28. McKinsey, "Accelerating Europe's AI adoption: The role of sovereign AI capabilities," December 19, 2025. https://www.mckinsey.com/industries/technology-media-and-telecommunications/our-insights/accelerating-europes-ai-adoption-the-role-of-sovereign-ai
29. IE University, "What is digital sovereignty and why does it matter?" January 2026. https://www.ie.edu/uncover-ie/digital-sovereignty-master-in-public-policy/
30. Katonic AI, "From Digital Colony to AI Sovereign: Europe's Blueprint for AI Independence." https://www.katonic.ai/blog/from-digital-colony-to-ai-sovereign-europe-blueprint-for-ai-independence
31. Euronews, "Europe is trying to write a new sovereign AI map. Here's how," December 1, 2025. https://www.euronews.com/next/2025/12/01/which-european-countries-are-building-their-own-sovereign-ai-to-compete-in-the-tech-race
32. Kubermatic, "Is Europe Breaking Up with US Cloud Giants?" July 18, 2025. https://www.kubermatic.com/blog/is-europe-breaking-up-with-us-cloud-giants/
33. uRadical.io, "Sovereignty Starts at the Terminal." https://uradical.io/latest-news/sovereignty-starts-at-the-terminal
34. Wire, "The Risks of Relying on U.S. Cloud Providers," November 3, 2025. https://wire.com/en/blog/risks-of-us-cloud-providers-european-digital-sovereignty
35. Iomovo, "Why Sovereign AI Requires Sovereign Clouds," 2025. https://www.iomovo.io/blog/sovereign-ai-requires-sovereign-clouds
36. The Register, "Microsoft's data sovereignty: Now with extra sovereignty!" November 7, 2025. https://www.theregister.com/2025/11/07/microsoft_announces_strengthening_of_sovereignty/

uRadical is a European consultancy helping organisations build sovereign infrastructure capability. We provide dependency assessments, migration architecture, and hands-on training in the open-source technologies that genuine digital sovereignty requires.

Related: Sovereignty Starts at the Terminal