Skip to main content

Risk, Resilience & Specialist Change

Digital Sovereignty Europe: Ditch Microsoft Now?

Digital Sovereignty Europe: Ditch Microsoft Now?

In Brief: Digital sovereignty Europe is reshaping public procurement. Governments in Germany and France are replacing Microsoft with open-source tools over data control concerns. Businesses relying on the same stack should take note now.

Several European governments have already made the decision to stop relying on Microsoft for core public services, and they are not being particularly quiet about the reasons why. Digital sovereignty Europe is no longer an abstract policy ambition; it is becoming procurement reality, and businesses that pay attention now will be better placed than those who notice only when the contracts change.

What Is Actually Happening

Germany is the clearest example. The state of Schleswig-Holstein announced plans to migrate around 30,000 government workers away from Microsoft Office and Windows, moving them to LibreOffice and Linux instead. Bavaria followed with similar signals. France’s Gendarmerie Nationale completed a migration to open-source tools years ago and has spoken openly about the cost savings. These are not fringe experiments. They are deliberate policy decisions backed by real budget lines.

The European Commission itself has been pushing member states to reduce dependence on a small number of US technology providers. The concern is not purely ideological. It is about data jurisdiction, geopolitical risk, and what happens when a foreign company changes its pricing, its terms of service, or its priorities in ways that governments cannot control.

Digital Sovereignty Europe: Why Governments Are Taking It Seriously

Digital sovereignty, at its core, means the ability to control your own data and the systems that process it, without being subject to the laws or decisions of another country. For European public bodies, this matters in a very specific way. The US Cloud Act, for instance, allows American authorities to request data stored by US companies anywhere in the world, including data held on servers physically located in Europe. GDPR compliance and Cloud Act exposure can sit in tension with each other, and that tension has been making European governments uncomfortable for years.

The war in Ukraine accelerated the conversation. It made clear, in ways that were hard to ignore, that technology infrastructure is a strategic asset. Governments started asking what would happen if access to critical software were disrupted, restricted, or made conditional on political factors. That is not a paranoid question. It is a reasonable one for any entity responsible for public services.

There is also a financial argument. Microsoft’s pricing has risen consistently over the past several years. Licences that once seemed like a reasonable overhead have become significant budget items for public bodies operating under fiscal pressure. Open-source alternatives, while not free in any meaningful sense once you factor in support, training, and migration, offer a different cost structure and, more importantly, no vendor lock-in.

OpenDesk Microsoft 365: What the Comparison Actually Shows

Germany’s response to the Microsoft question produced something worth knowing about if you work in or alongside the public sector. OpenDesk is an open-source office suite developed specifically to replace Microsoft 365 in German federal administration. It combines tools for document editing, video conferencing, project management, and file storage, all hosted on infrastructure that German authorities control directly.

The OpenDesk versus Microsoft 365 comparison is not flattering to either side if you are honest about it. OpenDesk is functional, increasingly capable, and politically aligned with what German institutions need. It is not as polished as Microsoft 365, and the learning curve for users accustomed to Teams and Outlook is real. But that is not the point the German government is making. The point is ownership. The point is knowing exactly where data sits, who can access it, and under what legal framework.

For businesses working with German public sector clients, this matters because procurement requirements are beginning to reflect these preferences. If your organisation shares documents, data, or systems with federal or state bodies, you may eventually be asked about your own data residency and tooling choices.

Microsoft Alternatives Business Owners Are Being Pushed Towards

Before anyone panics, the private sector is not about to be forced off Microsoft. That is not what is happening. But there are practical implications worth thinking through.

First, if you supply to European public sector organisations, expect those clients to ask harder questions about your data practices. Where does your data live? Who can access it? Are you using cloud services subject to US jurisdiction? These are not hostile questions; they are increasingly standard ones.

Second, the market for Microsoft alternatives in business is maturing. When I first started advising clients on cloud tooling around a decade ago, the honest answer to ‘what do we use instead of Office?’ was usually ‘Google Workspace, reluctantly.’ The options now are genuinely broader. Nextcloud for file storage and collaboration, Cryptpad for sensitive document work, Jitsi for video calls, and Proton’s business suite for privacy-conscious communication all have real enterprise adoption. None of them are perfect. All of them are usable.

Third, this is a reasonable moment to audit your own dependencies. Not because Microsoft is going anywhere, but because any business running every function through a single vendor is carrying concentration risk. That applies whether the vendor is Microsoft, Google, or anyone else.

The Risk Businesses Are Ignoring

The quiet assumption in most British and European businesses is that the Microsoft ecosystem is simply the default, and defaults do not need to be justified. That assumption has been comfortable for a long time. It is becoming less comfortable as regulatory pressure increases, as data residency requirements tighten, and as procurement standards in public contracts begin to encode digital sovereignty as a criterion rather than a preference.

I spoke to a technology director at a mid-sized consultancy earlier this year who had just lost a bid for a German federal project. One of the scoring criteria was data handling. The consultancy used Microsoft 365 with standard European data centre settings, assumed that was sufficient, and found out during debrief that it was not. They had not done anything wrong. They had simply not asked the question the client was already asking.

That gap between what businesses assume is fine and what public sector clients are beginning to require is where the real risk lives.

What You Should Actually Do

  1. Map your data flows. Know which tools process what data, where those tools store it, and which legal jurisdiction governs that storage. This is not an exotic exercise; it is basic operational clarity.
  2. Check your contracts. Microsoft’s data processing terms have been updated repeatedly in response to European regulatory pressure. Read what you have signed, and note what it does and does not guarantee about data residency and access.
  3. Talk to your public sector clients early. If you supply to European government bodies, ask them directly whether their procurement criteria are changing. Better to know in advance than to discover it during a competitive bid.
  4. Pilot an alternative for at least one non-critical function. Not because you need to replace Microsoft, but because understanding your options is useful information. Running Nextcloud for a project team for three months costs very little and teaches you a great deal.

Frequently Asked Questions

Is the European public sector actually abandoning Microsoft entirely?

No, not entirely, and not all at once. Individual states and agencies are making specific migration decisions for specific reasons. Germany’s Schleswig-Holstein is the most cited example. The direction of travel is away from total dependence, not necessarily away from Microsoft for every function.

Does this affect UK businesses post-Brexit?

Yes, if those businesses supply to European public sector clients or operate in EU member states. UK data adequacy decisions are also not permanent, which adds a layer of complexity for businesses handling data across the UK and EU.

Is OpenDesk available for private sector use?

OpenDesk is open source, so technically yes. In practice, it is built for and supported primarily in the context of German public administration. Private sector organisations outside that context would likely find it more practical to look at the component tools it bundles, such as Nextcloud and OnlyOffice, directly.

What is the realistic timeline for these changes to affect procurement?

It is already affecting procurement in Germany and, to a lesser extent, France and the Netherlands. For businesses with significant European public sector exposure, this is a present concern, not a future one.

Key Points to Take Away

  • Several European governments are actively migrating away from Microsoft tools for reasons of data jurisdiction and long-term cost control.
  • Digital sovereignty is now a procurement criterion in some European public sector contracts, not just a policy aspiration.
  • OpenDesk is Germany’s open-source alternative to Microsoft 365, developed for federal use and increasingly referenced in supplier conversations.
  • Businesses supplying to European public bodies should audit their data handling now, before it becomes a tender question they are unprepared for.
  • The private sector is not being forced to change, but concentration risk and supplier dependence are worth examining regardless.

The more interesting question is not whether Microsoft will survive this. It will. The question is whether the next generation of enterprise software procurement in Europe will look more like the current default or more like what Germany is building. If it moves even halfway toward the latter, the businesses that understood that shift early will have had a significant head start.

About this guidance

Sources and guidance are checked for relevance before publication. Where decisions affect legal, financial or regulatory duties, obtain advice for your circumstances.

More useful guidance

Related to this issue