AWS launched its European Sovereign Cloud (ESC) on January 15, 2026, aiming to solve Europe's vague digital sovereignty claims. The new cloud is physically and operationally separate from other AWS Regions, with all infrastructure and Qualified AWS European Sovereign Cloud Staff located within the EU. This addresses the core problem: many vendors promise sovereignty but lack a way to prove it.

The key innovation isn't the geography, but the ESC-Sovereign Reference Framework (ESC-SRF). AWS published this control model via AWS Artifact, positioning it as the basis for a dedicated SOC 2 attestation. This moves the conversation from marketing slides to auditable evidence, defining sovereignty across four pillars: data residency, corporate governance, operational autonomy, and law enforcement handling.

Beyond data, AWS explicitly includes customer-created metadata—like IAM roles and resource tags—in its sovereignty scope, keeping it within the EU. This is a critical detail, as metadata can reveal sensitive business context. ESC also features a dedicated European Security Operations Center and independent core systems for billing and identity, reducing non-EU dependencies for critical functions.