The tender, published a day earlier by the Commission’s IT department DG DIGIT, introduces a new “sovereignty score” formula to assess cloud providers’ compliance with EU rules. The score weighs multiple factors, including whether services are hosted within EU jurisdiction, exposed to foreign laws such as the US Cloud Act, or able to maintain operations in the event of foreign sanctions.